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..-Ca! i l ornia Company Flutter and Dynamics Department. Ed Versaw of the 
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EXECUTIVE SUMMARY 


This report describes a four phase study to identify potential fuel 
containment concepts for transport category aircraft. The study includes a 
review and evaluation of: 

Accident crash test and analyses data 

Design guidelines, specification and criteria 

Design procedures 

State-of-art technology 

Design studies and recommendations 

A literature survey was performed and the relative contributions from 
53 documents are noted. Transport airplane data are summarized including the 
results from fuLl-scale airplane crash tests and section tests. Analyses 
results which depict dynamic pulses are presented. Several reports including 
the U.S. Army Crash Survival Design Guide and the Special Aviation Fire and 
Explosion Reduction (SAFER) Advisory Committee are discussed in detail. 

Several fuel containment structural design concepts are evaluated with regard 
to both wing and fuselage application. The state-of-the art technology is 
summarized in a section of the report. A selection of approaches is described 
which includes the following: 

1. Component Improvement 

l. Wing structural modification 

3. Fuselage tank crash resistant material 

The selected concepts are reviewed with regard to benefit and penalties. 
The concepts are prioritized in order of effectiveness. The fuselage crash 
resistant fuel system (CRFS) is rated highest and has the greatest near-term 
potential. Wing structural modifications are considered long-term goals. 

















SECTION 1 
INTRODUCTION 


Several years ago the three major domestic airframe manufacturers 
completed a comprehensive review of civil aircraft accidents that occurred 
between 1959 and 1978. The results of these findings are reported in 
references 1 through 3 and summarized in reference 4. The review of transport 
airplane accidents has shown that transport airplane travel is a safe mode of 
transportation and that the trend with modern-day jets is improving. These 
studies, while identifying areas for improvement of occupant safety in 
survival crashes, also advocated improved design of airport environments, 
operating procedures and aircraft warning systems. In the accidents that have 
occurred, however, post-crash fire presents the greatest threat to occupant 
survivability. The fire hazard increases as the severity of the accident 
increases. To reduce the post-crash fire hazard through the potential 
application of improved fuel containment systems, it is necessary to first 
•lei ini- the overall crash environment and then determine what effect the crash 
sequence will have on the integrity of the fuel system which includes tanks, 
lines, shut-olf valves, and other related hardware. The problem of protection 
oeromes more complicated when consideration is given to the fact that 
t: an * port a i •■craft are involved in accidents in which the initial impact 
■•uni ir ions and subsequent sequence of events vary, and that fuel systems 
! f nr.ks , linos, engines) are located differently depending on configuration. 
'Manufacturers of military aircraft, particularly helicopters, have used Crash 
He 1 slant Fuel System (CRFS) technology with apparent success. To a much 
lessor degree, CRFS technology is used by the manufacturers of light aircraft. 
The design requirements and crash impact en.ironment for transport aircraft is 
much different than for the aforementioned aircraft types. Thus, in assessing 
t r.e : ene i b i L j tv of using existing CRFS technology, it is important to 
understand the differences in both the design and the crash environment 
uss.-riated with the various categories of aircraft (i.e., transport, light 
; i-.ed win.;, rotary wing and high-speed tactical aircraft). 
























The initial program consists of engineering studies shown in figure 1-1. 
These studies involve four phases of effort. Phases I, 11, and III include a 
review of the following material: 

• Literature 

• Transport Airplane Accident Data 

• Transport Airplane Test and Analysis Data 

• DoD Activity (U.S. Army Crash Surival Design Guide) 

• Design Criteria (Federal Air Regulations (FAR) 25 and Military 
Specifications) 

• Recommendations - Special Aviation Fire and Explosion Reduction 
(SAFER) Advisory Committee 

• State-of-the-Art Technology 

The Phase IV effort is a benefit/penalty study for CRFS concepts which, 
as a result of earlier findings, have been prioritized for potential future 
application. This phase includes: 

• Hazard reduction 

• Risk trends, deficiencies 

• Penalties (cost, weight, volume) 

• Availabiiity 

The I low diagram for the engineering studies is depicted in figure 1-2. 
This report provides a summary of these studies. The report is organized as 
depicted in figure 1-5. Previously presented data is reviewed and presented 
in Sections 2.0 - 4.0. Wing and fuselage containment concepts are discussed 
in Section 5.0. A state-of-the-art technology assessment is made in Section 
b.0. This includes a summary of transport airplane data, an assessment of the 
post-crash Lire reduction methods, a comparison of current design 
requirement/practices with U.S. Army design suggestions, all of which lead to 
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a preliminary priority ranking and a description of general approaches. The 
benefit and penalty analyses are performed in Section 7.0. Conclusions are 
presented in Section 8.0. 

















• SAFER 
Committee 
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• Literature Survey 
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• KRASH 
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Results 
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PHASE I 

* Crash environment 

• Definition 

• CRFS technology 
status assessment 

* Impact of CRFS technology 
on transport category aircraft 


PHASE II 

• CRFS strength, 
design, performance 
evaluation 

• Gov't, industry data 

• Applicability to 
transport airplanes 


PHASE III 

• Rating Methodology 
Development 

• Design Concepts 
and Features 

• Operational Environment 


TASK AREA I - 
ENGINEERING 
SERVICES 


PHASE IV 

• Costfbenefit 
study 

• Concepts 

• Hazard Reduction 

• Direct/Indirect 
Costs 

• Performance 

• Availability 

• Risks, trends 

• Deficiencies 

• Weightivolume 

• Configurations 


Figure I-I 
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Figure 1-2. FLow Diagram - Development of Prioritized CRFS 
Technology for Transport Category Airplanes 
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SECTION 2 
LITERATURE SURVEY 

Fifty-three reports, covering fuel system data and design specifications 
were reviewed. A list of the reports is shown in Appendix A. The reports 
include categorizing the data contained within each report with respect to 
several areas. These areas include: 


Aircraft configuration 

Rotary-wing - (R)* 

Light fixed-wing - (F) 

- Transport category - (T) 

Military fighter or transport - (M) 

Crash resistant fuel system (CRFS) involvement 


System 
Fuel tanks 
Fuel lines 
Valves 
- Fittings 

• Alternate Approaches 


- (o) 

- (T) 

- (D 

- (V) 

- (F) 


Forms and foils -(F) 

- Membranes, curtains, and liners - (M)(C)(L) 

Elastomer coating and sealants - (S) 

- Wing leading edge and lower skin - (LE)(LS) 

• Fire suppression, detection, and prevention 


• Fuel tank location 

Wing 

Fuselage 

• Analysis and design 

• Design criteria 

• Design concepts 

*Denotes symbols in figure 2-1. 


- (W) 

- (F) 
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• Crash environment 


• Accident data and statistics 

• Test data 

• Weight, volume, and cost data 

• Failure modes 

• Advanced materials 

• Specifications 

Also included in the review is one of the following three ratings 
assigned to each report: 


A - Contains current data that is directly applicable for evaluating 
transferability of technology. 

B - Contains background data. 

C - Not pertinent to current study because data are either too limited, 
not current, or not applicable. 


Figure 2-1 provides a matrix for the literature survey. The reports are 
grouped according to aircraft configuration as noted: 

1-/0 Transport category 

27-34 Rotary-wing 

35-38 Light fixed-wing 

39- 45 Military 

40- 53 Speci f icar. i ons, regulations 

For the most part, the reports dealing with military aircraft are rated C 
because they address fire suppression, detection, and prevention methods other 
than crash-resistant fuel systems (CRFS). One of the major concerns in 
military design is the suppression of fire as a result of missile (bullet) 
penetration. 





































































This aspect of design is not an objective of the current study. Report 
No. 39, which is a more recent publication, discusses designs in detail and 
addresses both crash design factors and composite materials. Report No. AO is 
a manual which was prepared to provide aircraft mishap investigators with 
state-of-the-art data and guidelines for investigating aircraft fires and 
explosions. Reports A1-A5, which were presented in 1973, provide little 
useful quantitative data. 

Rotary-wing and light fixed-wing oriented information are contained in 
reports Numbers 27 through 38. Reports 30, 37, and 38 are rated C for the 
following reasons: 

No. 30 - projectile penetration emphasis 

No. 37 - general discussion and overall statistics 

No. 38 - shows method for determining crash pulse definition for light 
fixed-wing aircraft. 

Report Numbers 28, 29, 31, 32, 33, and 34 are a series of U.S. Army Air 
Nobility Research and Development Laboratory Reports which were published 
between 1969-1974. These reports contain data which appear to be included in 
the U.S. Army Crash Survival Design Guide. These several reports are rated B 
because they provide background data which are summarized in one document. 
State-of-the-art Report Numbers 33 (interim) and 36 (final) are rated B 
because they contain definitive data on potential weight and cost factors for 
wing installed fuselage tanks, albeit the information is for a light fixed- 
wing aircraft. Report No. 27 is rated A since it is both a comprehensive 
document on the subject as well as the latest publication. A detailed 
discussion of Report No. 27 will be provided as part of the evaluation effort. 

Transport category aircraft reports are provided in reports Numbers 1 
through 2b. Two of these reports (Numbers 2 and 3) are rated C because of the 
insuffici tell amount at data t > have anv impact on this studv. Report Numbers 
u, 9, 11, and 12 are rated B on the basis of providing data which can be 
use Iu1 in future discussions on tin subject. Report No. b is a 1981 














publication which involves accident data review, the identification of 
post-crash fire scenarios, fire safety concepts, as'well as cost/benefit 
parameters. Report Numbers 1-3, 4, 7, 10, 13, and 14 are given an A rating. 
Report Numbers 1-3 are the 1982 publications entailing the accident reviews 
performed by the three major domestic transport aircraft manufacturers and, 
thus, contain the most current comprehensive body of accident data. Report 
No. 4 is a summary of Report Numbers 1-3. Report No. 7 is the SAFER committee 
report which is a comprehensive summary of the fuel safety issue and 
incorportes a great deal of the findings prior to 1980. Report No. 10, while 
published over 20 years ago, contains some interesting concepts regarding fuel 
containment which bear review on the basis of recent accident data investi¬ 
gations. Reports 13-15 provide full-scale crash test data. The latter report 
is the recently completed CIO test. Reports 16-19 describe narrow-body and 
wide-body airplane section drop tests and, as such, provide airframe responses 
and crush characteristics tor vertical impacts. Reports 20-23 emphasize 
analysis and tost data related to the crash environment. Report No. 24 
describes the design, development and installation of a CRFS for a DC-7 
transport. Report 25 describes tests of two concepts, articulated foam and 
reinforced wing structure to improve integral fuel tank crashworthiness 
performance. The articulated polyurethane foam tests involved an F-86 fuel 
tank to test the effectiveness of the foam in reducing fuel spray and leakage 
it impact. From these tests it was determined that ID pores/inch and 60 
pores/iru-h polyurethane foam have Little effect on fuel misting and tuol 
spilling. Tlie reinforced wing structure tests were performed with a DC-7 
wing. lhe addition of a .040 inch-thick doubler strip to the upper and lower 
DC-7 wing skins did not appreciably decrease the vulnerability of the integral 
tank to leakage, but the front spar rails when r< inforced bv ehordwise 
structural shapes did increase impact res i s atice. Report "* <i. r i !>*•* tests 
using DC-7 wing structure to evaluate t ■ sire tig t h of leading edge fuel tanks. 


















SECTION 3 

TRANSPORT AIRPLANE DATA 


3.1 ACCIDENT DATA 

The transport airplane accidents that occurred between 1959 and 1978 were 
reviewed by the major domestic airframe manufacturers. The pertinent fuel 
containment related data from each of these reports (references 1, 2, and 3) 
is utilized in the accident data review. The essence of these reports has 
been summarized in reference 4. The following is an assessment of the data 
and results of the three accident studies. 


1. Number of accidents reviewed 


176 accidents are contained in the combined data base. Figure 3-1 
shows the distribution. 

2. Aircraft type and size 

• FAR25 transport category aircraft ranging in gross weight from 
12,500 pounds GTOW and higher. 

• Smaller short haul (to 160,000 lb) 40% 

- Larger short haul (160,000-250,000 lb) 20% 

- Narrow-body long haul (250,000 - 400,000 lb) 35% 

- Wide-body long haul (< 400,000 lb) 3% 

3. Aircraft configuration 

• Wing mounted engines 60% 

• Aft-fuse Inge engines 37' 

• Combination of engines S 
Operational phase 

• Percentages as shown in figure 3-2 
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993 ACCIDENTS 
1958-1979 


DOUGLAS 
147 TOTAL) 



COMBINED TOTAL 
OF SELECTED 
SURVIVABLE 
ACCIDENTS: 

176 y 


Figure 3-1. Selected Accident Study Database (Ref. 4) 
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• 3,000 hours/year 

• 8.2 hours/day 

• 5 flights/day 
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• MILITARY ACTION 


.OAO 

TAXI. 

ETC. TAKEOFF 
3.3% 12.4% 


PERCENT OF ACCIDENTS 


INITIAL 

CLIMB CLIMB 
9.1% 6.5% 


CRUISE 

5.8% 


DESCENT 

8.4% 


FINAL 

APRCH LANDING 
26.6% 20.9% 


HOLDING 

PATTERN 


TAKEOFF 

RUNWAY 


N _f v V OUTER 

F,X MARKER 

I 10% I 2% 


EXPOSURE - PERCENT OF OPERATIONAL TIME 


Figure 3-2. Accidents as a Function of Operational Regime (Ref 
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Definition of accident scenario 


• Air-to-surface (ground) hard landing 


• Air-to-surface (ground) flight into obstruction 


Surface-to-surface (ground) overrun involving obstacles 


• Figure 3-3 shows fatalities as a percentage of total onboard, for 
an air-to-surface approach accident as a function of sink speed 
and including those that are fire-related. The data indicates a 
general increase in trauma-related fatalities occurring at 
aircraft sink speeds of approximately 25 ft/sec and above. 


• Figure 3-4 shows similar data for injuries. This data exhibits 
no apparent trend, indicating that injury causing mechanisms may 
be more local in nature than global. Injuries are shown to occur 
at sink speeds of 10 fps and above. 


Figure 3-5 depicts representative crash scenarios and the 
sequences that result in potential fire hazards. 


• The accident data does not completely quantify the crash 

environment. However, the data in the reports suggest impact 
conditions (nominal and ranges) associated with the accidents, 
i.e. : 


Surface-to-Surface -1) occurs during overrun or take-off 
abort; 2) usually a symmetrical impact, although individual 
accidents show airplane can veer off as much as 30 degrees; 3) 
obstacles detrimental for fuel containment include: 
embankment, light pole, mound, sliding with gear removed; and 
4) forward velocity in range of 40 knots to landing velocity. 


Air-to Surface - 1) occurs as a result of an undershoot or 
hard landing on runway; 2) symmetrical or unsymmetrica1 
impact; 3) gears usually extended; 4) average rate of descent 
20 ft/sec; 5) range of rate of descent 10 - 40 ft/sec; 6) 
forward velocity V to landing velocity; 7) pitch attitude 

range: -7.2° to +I§ a (avg. -4.4° to +4.7°); 8) roll attitude 


range: 0 to 40° (avg. 17°); 9) yaw attitude range: 
detined. 


Air-to-Surface , Impact with Obstacles - Same as 

air-to-surface, but with trees, poles and at higher approach 

velocities. 
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or 
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Fuel line rupture 
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Fuel line rupture 


Figure 3-5. Accident Kvents which Lead to a Fire Hazard (Ref. 3) 








Contribution to injuries and fatalities by structural features and 

subsystems. 

• The structural behavior of transport aircraft in accidents 
involving substantial hull damage, that are impact survivable, 
will contain the loss, destruction, or damage of one or more 
structural components or subsystems. 

• It was determined that the most critical event in the crash 
sequence that caused the most fatalities was the release and 
ignition of fuel creating a fire hazard. 

• In order to define approaches to improve crashworthiness of 
transport aircraft, it is necessary that the involvement of the 
structural components, systems, and subsystems be determined and 
the sequence of events and interaction of their involvement, in a 
variety of accidents, be well understood. 

Failure mechanisms include: 

• Fuselage 

- Crush, bending, local deformation, and tangential damage 


• dear 


- Separation and collapse 


• Wing 

- breaks, wing box destruction, and distortion 
Subsystem participation 

• On the basis of fatalities in percent of occupants, flight into 
obstructions is the most lethal accident followed by air to 
surface, unclassified, and then surface to surface. 

• The frequency of fire, wnile not independent of the total energy, 
further increases the lethality of the accident. 

• Considering total fatalities, the ranking of the accident 
scenarios are air-to-surface, flight into obstructions, 
surface-to-surface and unclassified. 

• No single scenario appears to be the major type of lethality; 
r.ither, each must be studied to fully understand the crash 
response of aircraft. Likely candidate scenarios would be 

jir-to-surface impact on gear, surface-to-surface - low 
obstruction and flight into obstruction - impact column. 
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Factors in fatalities 


• The major factor (reference 1) in fatalities is fire and smoke. 
There is a large number of unknowns which could represent a 
combination of trauma and fire. The role of trauma injuries in 
fire fatalities is undefined. An assessment of the interaction 
and role of these structural components in a crash environment is 
presented in the various reports. 

Potential for improving crash performance 

• Fire Hazard - Fire and smoke caused the most known fatalities. 

The greatest gain in crashworthiness might result from 
containment of fuel, which could reduce the fire hazard. Factors 
that affect the integrity of the fuel tanks need to be 
understood. Severe fuel fires have accounted for, directly or 
indirectly, approximately 36% of the fatalities in the study of 
133 impact survivable accidents (reference 1). Hazards consist 
of burns from flame and hot gases, inhalation of smoke/fumes from 
fuel fire, inhalation of smoke/fumes from burning airplane/ 
baggage/passenger materials (ignited by fuel fire), and 
panic/stampede of passengers due to fire/smoke effect. 

• To prevent or reduce the numbers of these types of fatalities, 
the following research areas are identified: 

( l) Fuel Containmen t 

• Develop tank vesse1/structure to be more resistant to 
tears, rupture, puncture, etc. 

• Develop wing box stru r.ure (assuming integral tank 
design) that will fail at predetermined locations when 
overload forces occur and include double fuel tank ends 
at these locations. 

• Develop fuel transfer/feed lines that are more resistant 
to rupture and, in the event of rupture, provide 
automatic shut-off of fuel flow. 

(2) Tank Ruptu re 

• Main landing gear collapse, or separation, allows the 
wing box to scrub on the runway or terrain and to impact 
low objects, or allow engine pods to scrub and separate. 
Main landing gear design that is more resistant to 
collapse or separation due to hard landings or travel 
over rough and soft terrain, would be effective in 


























reducing the number of fire-related accidents in which 
tear or rupture of the wing lower surface has occurred. 


• Engine separation and tumbling under the wing has caused 
rupture or puncture in the wing box. Engine to strut, o 
strut to wing design, should be developed to reduce 
probability of separation. 

• Fuel spill ignition has resulted from engine separation. 
During this occurrence the separation and arcing of 
electrical power leads can ignite fuel from broken feed 
lines. Designs to miminize arcing should be developed. 

II. Concluding remarks 

• The causative factors related to transport fatalities may not be 
well defined when many factors interact in the cabin area, or 
when the accident scenario is complex. However, much can still 
be learned from the historical study of accident data. 

• It became evident from the accident data study that the greatest 
potential for improved transport crashworthiness is in the 
reduction of fire related fatalities. Retaining fuselage 
integrity and delaying entrance of smoke and flame is essential 
if survivability is to be enhanced. Fuel additives, as in the 
anti-misting kerosene research program, rupture resistant fuel 
tanks or fuel cells, and structural improvement to protect tanks 
and occupants, should be subjects of research. 

« Structural integrity of fuel systems, fuselage, and landing gear 
are leading candidates for improved crashworthiness. Structural 
integrity of fuel systems is a key factor in suppression of 
post-crash fire. 


3.2 SUMMARY OF TEST DATA 

This section contains a summary of full-scale crash airplane section 
impact test results and fuel tanks. Included in this section are data 
pertinent to fuel containment from the following: 


1. Full-Scale Crash Tests 


• L1649 

• DC-7 

• 11707 (Laurinburg) 

• B72U (CID) 
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2. Airframe Section Tests 


• B707 

• DC-1U 

3. C oncentrated and Distrfbuted Load Tests 

• DC-7 Wing Fuel Tank 

• Wing Leading Edge Fuel Tank 

• General Aviation Airplane Wing Tank 

3.2.1 Full-Scale Crash Tests 


'3.2. 1.1 L1649 and DC-7 Airplanes 

These tests and their results are described in references 13 and 14, 
respectively. These tests simulated three types of accidents: 

1. A hard landing with a high rate of sink, causing failure of a 
landing gear (air-to-surface scenario) 

2. A wing low impact with the ground (air-to-surface flight into 
obstruction scenario) 

3. An impact into large trees in an off-airport forced landing 
(air-to-surface flight into obstruction scenario) 

Both tests involved impacts with sloped earthen mounds after the wings 
impacted the respective obstacles (pole and ground barriers). The DC-7 
airplane impacted an 8-degree slope tollowed by a 20-degree slope. The L1649 
impacted a 6-degree slope toLlowed by a 20-degree slope. The initial 6-degree 
and 8-degree slopes represent the surface-to-surface crash scenario described 
in the three accident studies (references 1, 2, and 1). The DC-7 fuselage 
suffered a break aft of the crew compartment (FS 100) during the 8-degree 
slope impact. The aircraft suffered substantially more damage during the 
subsequent 20-degree slope impact. The L1649 airplane experienced fuselage 
structural breakup only during the 20-degree slope impact. A summary of wing 
tank failures for both tests follows. 


























The fuel tank layouts are shown in figures 3-6 and 3-7 for the DC-7 and 
L1649 test configurations, respectively. The wing obstacles barriers (poles 
and mound) and slope embankments were similar (except for the initial slope 
angles; 6 degrees for the L1649, 8 degrees for the DC-7). The layout of the 
test site is depicted in figure 3-8. For the DC-7 test the left wing barrier 
was incLined earthen mound 15 feet high with a 35-degree slope extending from 
the outer tip to the center of the left wing. The right wing barriers consis¬ 
ted of two standard telephone poles placed upright to impact the leading edge 
of the wing. The poles were set approximately four feet in the ground. The 
wing barriers were the same for the L1649 except that mound was 20 feet high 
and had a 30-degree slope. The extra height was used to ensure wing contact 
on the left side. The wing damages experienced are shown in tables 3-1 and 
3-2. The airplane forward velocities at initial pole contact were approxi¬ 
mately 139 Knts (235 ft/sec) for the DC-7 versus 112 Knts (189 ft/sec) for the 
L1649. The DC-7 gross weight was 107,952 lb (including 23,928 lb fuel 
simulated weight in the wings) versus 159,131 lb (included 48900 lb fuel 
simulated weight) for the L1649. Due to a failure in the primary data 
recording system all quantitative data was lost, except for a limited number 
of floor, seat and occupant accelerations, during the DC-7 test. A full 
complement of L1649 floor, occupant, seat and wing acceleration data was 
obtained during the L1649 test. 

i.2.1.2 La urinburg and Controlled Impact Demonstration (C1D) Airplanes 

The Cll) and Laurinburg full-scale crash tests are described in references 
15 and 20, respectively. Both tests were performed in 1984. 


The Laurinburg drop test was performed on June 29, 1984, using a B707 
lirplane under the following impact conditions: 


• sink speed 

• pitch attitude 

• roll/yaw attitudes 

• airplane weight 

• gear position 


= 17 f t / s e c 
= 1 degree nose-up 
= 0 degrees 
= 195,000 lb. 

= retracted (no gears installed) 




















INSTRUMENTATION LEGEND 
• PRESSURE TRANSDUCERS 



CAPACITY 4,560 LBS, CAPACITY 3,480 LBS. 


Figure 3-6. DC-7 Fuel Tank Layout and Inst rumentation Locations 



Figure 3-7. 1.1649 Fuel Tank Layout and Instrumentation Locations 
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Figure 3-8. Layout of Obstacles for L1649 and DC-7 Full-Scale Crash Tests 

The test was conducted to simulate the planned CID impact conditions 
except for forward velocity and aerodynamic Loading. The B707 airplane is 
100 inches longer (20 inches forward of FS620, 80 inches aft ol FS960), than 
the CID B720 test article, but, basically of the same construction and design. 

Damage to the aircraft was reviewed immediately after the impact and 
several weeks later, after the test vehicle had been lifted off the ground. 

It was estimated that the crush was about 2 inches, aft of the nose gear 
bulkhead; 4 inches, forward of the wing leading edge (FS620), and 11 to 13 
inches, aft of the Main Landing Gear (MLG) Rear Bulkhead (FS960). The inboard 
wing engine pylons failed noticeably at the upper strut attach points from the 
pylon to the wing. The airplane sustained damage to the vertical centerline 
keel and FS960 bulkhead. The bulkhead web crack occured at the lower section 
and was traced up through to the floor. Fuselage underside damage is 
sustained from aft of nose gear bulkhead (FS300) to the aft cargo bay at 
FS1120. The extent of damage is more severe in the aft region as compared 
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TABLE 3-2. RIGHT WING DAMAGE EXPERIENCED DURING L1649 AND 
DC-7 FULL-SCALE CRASH TESTS 


Fuel Tank 


No. Location 

Description of Damage 


L16 4 9 


Outboard 


Midwing 


Inboard 


Out board 


Alternate tank. 
Rehind and 
outboard of 
Engine No. 4 


Midwing. Between 
No. 3 and No. 4 
Eng, ines 


JA Alternate l..nk. 

Inboard Near Root 


Telephone pole sheared outer wing panel, 
Telephone pole cut into wing. 

Not ruptured. 


Telephone pole cut-off the wing 12 ft. from 
the tip. No. 4 tank ruptured. The pole 
impact totally destroyed the fuel tank. The 
wing was extensively buckled by the pole 
impact. The tank was destroyed during the 
impact. 

Wing skin was separated spanwise from the 
forward spar. Several square feet of 
internal structure was buckled between the 
forward and center spar. The leading edge 
was compressed back flat against the forward 
spar. 

Struck 2nd pole barrier. The pole 
penetrated three feet into the wing 
structure between the No. 3 and No. 4 
engines and then broke. The wing broke 
(from leading edge to trailing edge) at this 
location due to pole impact. Three foot 
spanwise sections of spar cap and spar web 
were t•.t . from the forwa.,. and center spar 
and dellected aft into the fuel tanks. The 
leading edge of the wing was torn free from 
the spar. 

Experienced structural break at root during 
slope impact. Only jagged and torn metal 
remained. Wing separated during the 
2d - degree slope impact. 


V s'.v' V V NW 






















with the forward cargo bay. The post-test review of the crushed ducting along 
the wing box keel (FS620-82U) indicates that the structure had deflected at 
least b inches, and possibly as much as 8 inches. The bulkhead at the wing 
trailing edge (FS820) ruptured and pushed the floor at thaL point up at least 
4 inches at the center. The transverse beams and seat tracks at that location 
were severed. The frames between FS820 and FS960 exhibited damage and an 
outboard bulge of the fuselage above the floor was noticeable after the 
impact. Since no floor accelerations were recorded, it is difficult to relate 
the observed damage with quantitative response levels. That was done using 
analysis and is described later. The observed damage from this test is 
summarized below: 

• Keel damage FS820-960 Bulkhead Damage at FS820 and 960. 

• Cargo floor damage shows evidence of crushing in lower region and 
frame failures. 

• Damage aft of FS960 much more extensive than forward of FS620. 

• b-inch ducting in wheel well region shows evidence of complete crush. 

• While the inboard engine failed at its upper attach points it 
remained lodged between wing and ground. 

• No wing fuel tank damage, due to the impact, except at the wing tip 
which initially contacted the ground. 

Tl\e Controlled Impact Demonstration (CID) test was performed on 
December L, 1984, at the NASA Dryden Lake Bed, Edwards Air Force Base, 
California (reference 15). The planned impact conditions are compared to the 
actual impact conditions in table 3-3. The complete CID impact and slide-out 
sequence, which includes wing cutter impact and subsequent initiation of 
post-crash tire, is shown in figure 3-9. The test aircraft was in an 
unplanned rolled and yawed to the left attitude just prior to initial ground 
contact. Subsequently, the aircraft impacted on the left wing outboard No. 1 
engine, rotated onto the No. 2 engine and impacted the forward fuselage about 
400 msec, after the No. I engine contact. Peak ground impact responses were 
developed within 500 msec, after initial fuselage ground impact and prior to 
contact with any ground obstructions. 











The CID airframe and interior components were extensively instrumented. 
Airframe accelerations and bending moments were recorded for the wing and 
fuselage impacts. A total of 352 data channels were recorded. Most of the 
recorded data was for fuselage, floor, seat and occupant responses. However, 
a total of 22 channels of data WoS devoted to wing and engine accelerations 
and wing bending. The acceleration levels along the fuselage were generally 
relatively low, as can be observed from the distribution shown in figure 3-10. 
The fuselage underside crush measurements, which were taken at the conclusion 
of the test after the center keelbeam was damaged by a wing cutter and after 
the post-impact fire and had been experienced, are shown in figure 3-11, along 
with the Laurinburg drop test and analytical parametric study results. 

i.2.2 Airplane Section Tests 

Tile l-'AA/N'ASA has conducted an array of full-scale impact tests using 
typical transport aircraft sections. The tests were performed to examine 
structural failure mechanisms and exper imental 1y defined the inherent 
structural response character iscics of airframes. The data base is being used 
in the development of crash dynamics analytical methodologies. The summary of 
section tests is presented in table 3-4. The results of two narrow-body 
airframe section tests, conducted with an impact velocity of 20 ft/sec, 
without and with underfloor cargo, are shown in figures 3-12 and 3-13 
respectively. The fuselage frame sections shown in figures 3-12 and 3-13 are 
>oft structure and the test results reflect relatively low frequency (with 
high frequency overtones) and low amplitude responses. By contrast, a hard 
section, such as depicted in figure 3-14, could produce higher g's with 
shorter durations under the test conditions presented in table 3-4. The 
fuselage center section, with proper wing leading, will actually crush much 
more than shown and produce broader, lower accelerations. The Laurinburg 
Lest, previously discussed, showed crush in the adjacent wing center section 
of f> to M inches. The response ol a wide-body airplane section, along without 
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CRUSH INCHES 




■ LAURINBURG DROP TEST, 

-* 1 ° PITCH, 17 FT/SEC SINK SPEED 

a FAA/NASA CID' POST TEST MEASUREMENTS* 

0 TO 2° PITCH, 14 17 FT/SEC SINK SPEED 

□ KRASH' CID STICK MODEL PARAMETRIC STUDIES. 
RANGE OF CONDITIONS; PITCH ATTITUDE 6° TO . 6“ 
SINK SPEED 15 22 FT SEC 

•POST TEST MEASUREMENTS IN AFT BODY REFLECT 
EFFECT OF LOSS OF KEELBEAM AFTER ENGINE NO 3 
CUTTER IMPACT AND SUBSEQUENT COl LAPSE AFTER 
POST IMPACT FIRE 


Figure 3-1L. Lower Fuselage Underside Crush 



POST TEST VIEW 


TIME, SEC 


Figure j-12. Results of Narrow-body Airplane Fuselage 

Section (Without Cargo) Test (Reference 17) 















TABLE 3-4. FAA/NASA AIRFRAME SECTION IMPACT TESTS 


AirpLune Type Test Specimen 


Approximate* 

Weight (Lb) I Test Condition 


Forward Fuselage Section 

5100 

Vertical Impact (17) 

i 

1 


20 FPS 

Center Fuselage Section 

8000 

Vertical Impact (19) 



20 FPS 

Forward Fuselage Section 

6400 

Vertical Impact (16) 

with Cargo 


20 FPS 

1 

Aft Fuselage Section 

5000 

Vertical Impact (18) 



20 FPS 


* Section, occupant and cargo 
( ) Reference Reports 


tad: 


ffcxi 


\\ 


POST TEST VIEW 


TIME, SEC, 


F igun- '3-1 i. 


Results of Narrow-Body Airplane Forward Fuselag 
Section (With Cargo) Test (Reference 16) 















































































f AA AOS 19 (1964) "STRUCTURAL DESIGN FOR FUEL CONTAINMENT a) REPRESENTATIVE TANK DESIGN (FAILED, RUPIURE) 

UNDER SURVIVABLE CRASH CONDITIONS". NISSLEY, P.H AND * AV 17.9 FT/SEC. 30.8G. 38.8 PSI 

HE ID T I REINFORCED TANK DESIGN (FAILED, RUPTURE) 

AV - 27 8 FT/SEC, 34.8D, 59.5 PSI 
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Figure 3-16. Narrow-Body Frame Section Oi -at 1 ac> and Force 

Test Results (Reference 16) 


• Improvements Ln the design of the wing for fuel containment can be 
achieved with a CRFS for concentrated impacts e*.g., trcv, pole. 
However, the maximum impact velocity, tor a CRFS installation was 
13U ft./sec. The loss in fuel volume and range for the CRFS in this 
situation (reference 3.4) was about 7 percent, and 7.6 percent, 
respectively. The fueL loss for the wing fuel system lor the DC- 3 
airplane was 384 gallons which weighs 23oD lb. The CRFS could add 
about 3 percent of dry wing weight. Other test installation of . 
similar airplane wing section showed up to 11 percent volume loss and 
a 5.4 percent weight penalty for 120 gallons of tnel loss in tests up 
to an impact velocity of 110 ft/'see and impact tore., of <7,000 lb 
(reference 12). Tests ot a transport airplane oun.vnC .nal wi”i fuel 
tank leading edge indicated that i . i lure would oc. .. in the i mpact 
velocity range of 108 to 136 ft's._c, depending on the type of obstacle 
(.steel pipe or log). Since no fuel nr representative weight was used 
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in these tests, it is expected that these impact velocities are high. 
An impact into a pole or tree with the airplane moving forward at 140 
t t,/sec can be related to the average velocity of overrun accidents, 
where 29.4 percent of the onboard occupants are fatalities in 
airplanes which experience fuselage breaks. In a test of a general 
aviation airplane wing (reference 36), improved with a crash resistant 
tank, an impact velocity ot 95 ft/sec was achieved with ■. it i sf actorv 
results. The penalty for this design was up to 7. « percent fuel 
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• Improvements in the design of the wing for fuel containment can be 
achieved with structural reinforcement for distribut'd impact loads. 
Tests of both modified wing tank sections and wings freference 10) 
showed capability to withstand a change in velocity o; 4U it/sec. Tin 
estimated weight penalty is 3 percent to 4 percent o! the wing dry 
weight. Structural modifications to achieve improvement to withstand 
distributed impacts will also be beneficial in resisting higher fuel 
inertia loads. The tests for distributed loadings at a velocitv of -V 
ft sec are substantially below the survivable crash tnvironment. 

Arc ideal d it a show that at an average forward velocity of 9t> ft.-sec, 
b. 'i percent of the onboard occupants in airplanes which experience 
fusel ire breaks, suffer latalities. This ratio increases to 2*1.4 
percent and 77.K percent at forward velocities of 140 and 2.30 ft/sec. 
respective)/. Tests of the Lif>49 and DC-7 Involving wing contact witl 
an inclined murid at impact velocities of between 1X9 and 233 it /see 
devastate the iuel tanks. The CIO test, on the other hand, showed 
t cat .or t he w: , low distributed impact load as a result of a roll 
< '”iil i t ci"! m !)• contained in current designs for at least 13 

degrees roi., iv .t an impact sink speed 17.3 ft/sec. 
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Several analyses hav been reported in references 20-23 which are 
per' ineiil !.o the evaluation of fuel containnent concepts. The studies 
described .a ret erences 20, 31, and 22, are recent. Reference 20 describes 
pre-CID ani.yses. The planned impact was a symmetric condition (no roll or 
yaw) with i Ue,gree nose-up jiitcli, a 130 knot forward velocity and a 17 ft/sec 
sink rate. ! he actual impact was unsyminet r i c.i i. The correlation with the 
ausymniet r i ca 1 (111) inipa.t data is reported in reference 21. In general, the 
analysis r« suits lgroe with the test results, as can be seen from comparison 

in r i.gtire If t a rough i-2o. Figure 3-17 shows the fuselage vertical responsi 

•1istrIbutioa. Hi circs 5-Id and 3-19 show the bending moment comparison for 

t!i-' fuse 1 age a.id wing, respect ive Jy. The major damage associated with the 

a i r-to-gl'ouini impact was the lass of the left outer wing and the left wing 
« ngi ties. 1 he !use 1 age responses were considered low relative to airframe 

strength. ill" lett wing, response is shown in figure 3-19 to be close to its 
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Tile KRASil correlated model (reference 21) was 


















IMPACT CONDITION 

FORWARD VELOCITY - 155 KNOTS 

SINK SPEED - 14 FT/SEC 

PITCH ATTITUDE - 1 0 TO 2 ° (NOSE DOWN) 


ROLL YAW ATTITUDES - 0° 
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used i «> assess impacts that would extend to the limits of airframe structural 
integrity. Results of post-CLD analyses are reported in reference 22. The 
study, described in reference 23, provides both test and analyses data. The 
test data shows structure crush characteristics and relates to possible limits 
of transport airplane airt rattles due to axial (longitudinal) loading. 


The wing dynamic responses can be considered similar to the fuselage 
pilse since the analyses results are based on air-to-ground and ground-to- 
ground impacts on the fuselage, and no obstacles such as trees, or poles. For 
i 1 use 1age impact the wing responds in a low frequency bending mode ( 1-2 Hz) 
tiie duration of the pulse is relatively long. During the CID test a represen¬ 
tative vertical acceleration measured on the right wing (left wing impacted 
ground) shows _+5G peak with a time period of 1.3 cycles/second. Air-to- 
ground analyses show peak vertical g's between 10.8 and 14.2 along the wing 
r.gion where iuel could he contained (BL 118-431) for an airplane sink-speed 


800 

















of 22 ft/sec and with a flat pitch attitude. The individual wing masses 
(exclusive of the outboard masses) exhibit significant responses which have an 
average vertical acceleration of 5.0g to 6.8g for durations of 0.120 to 0.162 
seconds and velocity changes (.AV) between 23.8 and 26 ft/sec. 

Airframe structural integrity based on parametric studies (reference 22) 
suggest the crash design velocity envelope depicted in figure 3-20. Crashes 
within this envelope can be considered surviable since the airframe does not 
break, up. However, to be truly survivable seats, equipment, and fuel systems 
will have to be designed to be compatible. 
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Figure 3-20. Velocity Envelope for Structural Integrity 


























SECTION 4 

DESIGN STUDIES, RECOMMENDATION'S AND CRITERIA 


4.I DESIGN STUDIES 

4. 1. 1 FAA-ADS-19 

FAA-ADS-19 (reference 10) describes a study covering the design and 
construction of aircraft fuel tanks for the purpose of developing design 
principles for improving fuel containment during survivable, or marginally 
survivable, crash conditions. This effort was confined to wing integral fuel 
tanks for multi- piston-engine powered transport airplanes. 

The crash environment for design considerations are considered to consist 

of : 

• Local impact trees, poles, large rods for puncturing from rocks, 
stumps, dislodged parts, etc. 

• Distributed impact against earth mounds or during wing low ground 
contact. 

• Internal fuel pressure due to inertial loading. 

The effect of these loadings and the recommended design principles are 
summarised in table 4-1. 

The subject report discussed: 

• Fuel tank design details 

• Fuel containment details 

• Containment: in fuel lines 

• Fuel tank location 

• rue 1 containment test program 
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• Feasibility studies of advanced concepts 

advanced structures 

energy absorbing structures 

minimum fire concepts 

fuel dump devices and breakaway wings 

• Cost/weight associated 'ith fuel containment concepts 

Several points that are made in FAA-ADS-19 are: 

• Deceleration capabilities vary with airplane size; the trend being a 
decrease in longitudinal acceleration as gross weight increases. For 
example, 150,UUO lb. transport aircraft may sustain 5g deceleration 
with wings intact while for lighter transport ( 50,0UU lb.) the 
comparable deceleration may be 8g. 

• Survivahle transport crashes usually occur at or near airports in 
reasonably clear areas. Distributed impact loading and concentrated 
piercing loads, therefore, are more frequently the cause of fuel 
spillage than are concentrated impact loads. 

• The emphasis for incorporation of fuel containment design principles 
should be placed on the lower, forward surface of the wing. 
Concentrated impact resistance will be improved for the rare cases in 
which trees or poles are encountered. 

• Fuel containment depends upon the integrity of the fuel lines as well 
as of the tank itself. Even though the fuel tanks are not damaged, 
containment Is not realized if fuel lines outside the tank are 
ruptured or open to allow fuel flow. 

• Shutoff valves are required in the tank-to-engine Lines so that How 
can be stopped in case of an engine fire or failure. However, shutoff 
valve actuation is not necessarily accomplished in cases of engine 
detachment or displacement. ( IdeaL location is valve located inside 
lower wing surface.) 

• In addition to the need for proper shutoff location, a means of 
automatic operation should be included. 

• The fuel Lines in the fuselage, between the wing and engines, are 
subject to damage as the fuselage is collapsed or ruptured at impact 
or during subsequent ground slide. Rupture of these Lines, even 
without fuel flow, allows fire under the passenger section. Positive 
shielding tor ail fuselage damage possibilities is doubtfuL; however, 
shielding tor t lie case of lower fuselage collapse is possibLe, 
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• Analysis which produces the magnitude of concentrated aft load 
required to cause chordwise bending or shear failure is generally 
conservative (high) because: 

1. Wing structure is seldom strong enough locally to sustain the 
concentrated loads (see figure 4-1) obtained. 

2. Few obstacles present concentrated resistance. 

• Pole impacts change aircraft kinetic energy less than 1... 

• Pole breaking tests have indicated that pole strength is reduced 
considerably as a result of crushing at the point of impact. 

• Calculated pole force as a function of aircraft speed, pole diameter 
and height is presented in figure 4-2. 


It should be noted that FAA-ADS-19 was written in 1964 and the data and 
remarks presented are for piston-engine narrow-body airplanes of 150,000 lb 
gross weight or less. Current jet powered aircraft can reach in excess of 
700,000 lb gross take-off weight. Many of the points made in FAA-ADS-19 are 
still applicable although some are not appropriate. For example: 


• Rare cases of accident events should not be emphasized in the design 
for fuel containment. 

• Current design philosophy for ideal location of shutoff valves is now 
inside of fuel tank as opposed to inside the lower wing surface. 

• Use of automated shutoff valves is of concern since inadvertent 
shutoffs could have catastrophic effects. 


4.1.2 FAA-ADS-27 

FAA-ADS-27 (reference 24) describes a study in which a crash-resistant 
fuel system utilizing high-strength bladder fuel cells, breakaway fittings, 
crash-load- actuated shutoff valves, and fiberglass protective liners was 
designed and installed in the center section of a DC-7 airplane wing. The 
wing was mounted on a wheeled dolly and the Mo. 2 and Mo. 3 main fuel tanks 
were filled with water. The Mo. 2 tank was standard DC-7 configuration; the 
No. 3 tank was equipped with Crash Resistant Fuel System (CRFS) components. A 
jet-propelled car was used to accelerate the wing and dolly to predetermined 
v. - lor i r i ex 































prior to engaging a decelerator. The decelerator, especially designed for 
this project, imposed controlled decelerations on the wing ranging from 2 g's 
to 21 g's (28-g fuel equivalent). There were no failures in either standard or 
crash-resistant fuel (CRF) system fuel cells and no inadvertent valve closures 
in the CRF system during the tests. Hydraulic loads were nominal and were not 
additive from one cell to another through interconnections. A final destruc¬ 
tive test was conducted wherein the wing, at a velocity of 77 knots, engaged 
two stationary vertical poles, positioned to shear the wing panels at the 
outboard nacelles. It was demonstrated that the CRF system has a potential 
for greater chances of fuel containment, with consequent less fire hazard, 
provided a more positive means of triggering shutoff valves is utilized. The 
CRF system, as installed in a DC-7, imposes a penalty of 6.97 percent fuel 
volume loss tor a range loss of 6.97 percent. Accepting this volume and range 
Loss, the weight will decrease about 1200 lbs. However, since there is a loss 
of 184 gallons of fuel (6.9 lbs/gallon) there is actually a weight penalty to 
achieve the same range and payload. 

These tests were made using a DC-7 structure because of its availability 
and because it was representative of modern transport structures at that time. 
\'o analysis was made concerning the practical or economic aspects of utilizing 
bladder type fuel cells in commercial aircraft. 






» 

A 


The report suggests the following design and installation criteria: 

1. In addition to the present requirement of MIL-T-27422 (Military 

Specification - Tank, Fuel, Crash-Resistant Aircraft) and MIL-V-27393 
(Military Specification - Valve, Safety, Fuel Cell Fitting, Crash- 
Resistant, General Specification for) greater emphasis should be 
placed upon the following listed items: 

a. 
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c. Valve actuation - additional moans of valve triggering 
independent of cell movement should be provided. This system 
would be in addition to present triggering methods (cell 
movement) and be capable of triggering valves some distance from 
an impacted area. The system sensing should be deformation 
rather than g loading. 

d. Valve interconnecting bellows - should be molded elastomer 
instead of teflon. 

e. Incorporate high strength bands around fuel cells which will 
provide load paths to and/or between valve adapter frangible 
at tachments. 

f. Frangible fittings - decrease fitting pull-off force to allow 
triggering of CRF valves under lower initial loading and decrease 
the load passing through the fuel cells to fail fittings. 

g. Generally speaking, in new design and construction, attention 
should be given to locating fuel cells in other than areas 
vulnerable to structural penetration and ignition sources. SST 
aircraft will probably require fuselage tanks. Such tanks should 
be protected by structure, preferably of non-sparking material. 

• 4 . i. J FAA-ASF-80-4 

FAA-ASF-8U-4 (reference 7) provides a summary of the Special Aviation 
Fire and Explosion Reduction (SAFER) Advisory Committee Report. Several 
methods for reducing the fire hazard in a post-crash environment were reviewed 
to determine their feasibility and potential for improving passenger surviva- 
biLity. These methods included explosion suppression systems, fuel tank foam 
or foil, fuel tank inerting, crash-resistant fuel tanks, and anti-misting 
fuels. The report stated in 1980, "that none of these methods, at their 
present state of development, are feasible for commercial aircraft application 
or otter significant advantages over present methods of protection such as 
vent flame arrestors and assured cutoff of the fuel supply to the engine in 
emergencies." The SAFER committee summary report fu rther states : 

"• Further development of fuel tank inerting methods is encouraged to 
reduce complexity and weight and improve reliability of the system. 

• Anticipated FAA/NASA programs to investigate factors to be considered 
to improve tlie crashworthiness of aircraft is expected to include the 

















use of crash-resistant fuel tanks. At the present time they appear to 
be feasible in fuselage cargo compartments only. 

• Antiraisting fuels appear to hold the most promise for increasing 
passenger survivability by reducing the fuel fire hazard in the 
post-crash environment. However, much development testing is required 
before its feasibility can be established. 

• The state of development of the above systems is not sufficient at 
this time to warrant modifying regulations which require their 
incorporation. However, it is suggested that the FAA consider 
modifications to the regulations requiring the inclusion of fuel tank 
vent protection from ground ignition sources and assurance of engine 
fuel supply cutoff in emergency situations." 

A summary of two SAFER subcommittee reports is presented in Appendix. B. 


As a result of this study, the SAFER group arrived at the following 
conclusions: 


• It is feasible to install crash-resistant fuel cells in fuselage cargo 
compartments. 

• It is not feasible to install crash-resistant fuel cells in the wings 
of conventional transport aircraft. 

• Existing Federal Aviation Regulations are adequate. 

• Further definition of criteria should evolve from total aircraft 
crashworthiness considerations. 


4.2 DESIGN CRITERIA AND RECOMMENDATIONS 

4.2.1 The U.S. Army Crash Survival Design Guide 

The U.S. Army Crash Survival Design Guide (reference 27) is a five-volume 
document which was most recently revised i.i 1980. The five volumes consist 
of:: 


Volume 1 


Design Criteria Checklists 



















Volume II 


Aircraft Crash Environment and Human Tolerance 


Volume III - Aircraft Structural Crashworthiness 

Volume IV - Aircraft Seats, Restraints, Litters and Padding 

Volume V - Aircraft Postcrash Survival 

Volume I (Aircraft Crash Environment) and Volume V (Aircraft Postcrash 

Survival) are most pertinent for the subject study. In Volume I a summary of 
impact design conditions are presented. Figure 4-3 illustrates the combined 
longitudinal, lateral and vertical velocity, changes for helicopters to be 
used in determining intermediate velocity change components. For light 
fixed-wing aircraft and attack and cargo helicopters, figure 4-3 will still be 
correct, but (c) and (d) must be altered for a lateral velocity change of 25 
ft/sec instead of 30 ft/sec. The velocity change, V in feet per second, for 
a triangular pulse shape that is recommended for design purposes for rotary 
and light fixed-wing aircraft, is shown in table 4-2. Volume I also presents 
a chapter entitled, "Aircraft Postcrash Survival." However, since this is the 
subject of Volume V, a more comprehensive treatment of this subject can be 
obtained from the material in the latter volume. 

The post-crash fire environment is discussed in Chapter 3 of Volume V. 
Included in this section are discussions on such topics as heat, smoke and 
toxic gases, human tolerance to heat, toxic gases and miscellaneous fire 
factors. While important subjects, this section is not as pertinent to fuel 
containment as the material in Chapter 4, "Post-Crash Fire Protection." 

Chapter 4 provides design suggestions for crashworthy systems oriented toward 
a reduction of fuel spiLlage and ignition sources and greater emphasis on 
"built-in" post-crash fire protection during the aircraft design stage as a 
means of improving post-crash fire survival. 
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Fii>un* 4-3. Design Velocity Changes, Off-Axis Requirements 















TABLE 4-2. SUMMARY OF DESLGN CONDITIONS FOR ROTARY-WINC AND LIGHT 
FIXED-WING AIRCRAFT 


I 


Impart Direction 
Longitudinal 
Vertical 
La ter.3 1* 
Lateral** 


Velocity 
Change 
(Ft /Sec) 

50 

42 

23 

30 


* Light fixed-wing, attack, and cargo helicopters. 
** Other helicopters. 


The recommended design features contained in Volume V, Section 4, are 
summarised in table 4-3. The features relate to fuel tanks, fuel lines and 
supportive components. 

4.2.2 Military Specifications 

The military crash design requirements are different depending upon the 
particular branch of the defense agency. Military specifications include: 


MlL-STD-1290 


Light Fixed and Rotary Wing Aircraft 
Crashworthiness (reference 46) 


MIL-T-27422B Aircraft Crash-Resistant Fuel Tank 

(reference 47,) Applicable to all Department 
of Defense departments and agencies 

M1L-A-B863A Airplane Strength and Rigidity Miscellaneous 

Loads (reference 4B) 


AR-36 


Structur.il Design Requirement (reference 49) 
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TABLE 4-3. CRASH SURVIVAL DESIGN GUIDE RECOMMENDED FUEL CONTAINMENT DESIGN 

FEATURES 


FUEL CONTAINMENT 


RECOMMENDED FEATURES 


Increase distance between occupants and fuel supply and 
ignition source. 

Avoid rupture due to landing gear penetration. 

Locate away from ground contact in crash sequence and 
thus reduce exposure to rocks, stumps and other 
irregularities. 

Locate wing tanks as far outboard as possible but not 
at tip. 

Avoid locating in areas where considerable structure 
collapse can occur and tanks are subject to pressures 
that exceed design limits or exposed to torn and jagged 
metal. 

Avoid sharp cutting corners, penetrating spars and 
longerons. 


Cylindrical or rectangular shape is best. 

Avoid proturbances and interconnecting cells, most 
vulnerable to rupture. 

If tanks deviate greatly from regular cylindrical or 
parallel and piped shapes, consideration should be 
given to use of separate tanks or interconnecting self¬ 
sealing fittings. 

To minimize snagging and excessive concent rat ion of 
stresses, inside angles should be avoided. 

All outside angles should have a radius > 1 inch. 

Tanks should be oriented so that the side with the 
greatest surface area is facing the direction of 
probable impact. 






















TABLE 4-3. CRASH SURVIVAL DESIGN' GUIDE RECOMMENDED FUEL CONTAINMENT DESIGN 

FEATURES (CONT'D) 



Fitt ings 


Attachments 


FUEL CONTAINMENT 


RECOMMENDED FEATURES 


Must possess high degree of cut and tear resistance and 
have moderate elongation - MIL-T-27422B requirements. 

Design tank fitting to pull free of airframe structure 
rather than out of tank. 

Exhibit crash impact resistance per MIL-T-27422B (65 ft 
height drop test). 


Use high strength insert-retention methods ( 80* of 

fuel cell wall strength) 


Secure fuel tank to airframe and connecting plumbing in 
a way that allows tank to pull free of the attachments 
without rupturing when structural displacement occurs 
in a crash. 


Use frangible brackets or bolts to ensure separation at 
specified loads. Either fail material or some facet of 
the design must meet operational and service loads with 
margin (approx, factor of 10), but fail at 25% to 50% 
of minimum load required to fail the attached system or 
component. 

Frangible attachments should be designed to separate 
efficiently in the direction of force most likely to 
occur during a crash impact. 


FueL Lines 


Line 

Construct ion 


Avoid cutting of lines by surrounding structure or 
being worn through by rubbing against rough surfaces. 


Use flexible hose armored with a steel braided harness 
in vulnerable areas. 

























TABLE 4-3. 


CRASH SURVIVAL DESIGN GUIDE RECOMMENDED FUEL CONTAINMENT DESIGN 
FEATURES (CONT'D) 


FUEL CONTAINMENT 


RECOMMENDED FEATURES 


If breakaway valves are not provided, hoses 20% to 30% 
longer than minimum are to be used. 

Fittings are to meet strength requirements shown when 
tested in modes shown. 

All fuel lines should be secured with breakaway 
(frangible) attachment clips for areas of anticipated 
structural dedormation. 

When fuel lines pass through areas where extensive 
displacement or complete separation is anticipated, 
self-sealing breakaway valves should be used. 

Breakaway valves must meet all opeational and service 
loads with satisfactory margin and separate between 25% 
and 50% minimum failure load. 

Systems with line-to-line breakaway valves should 
consider potential hazards to cross-axis shear loading 
on the valve halves. If possible, use omnidirectional 
valves. 


Route along heavier structural members. 

Provide space into which hose can deform. 

If design requirements limit the use of protective 
measures, full use should be made of self-sealing 
breakaway couplings located in areas of anticipated 
fa i lures. 

Space and flexibility should be provided at the 
cross-over connection, drains and outlet lines if they 
are vulnerable to impact damage. 

Consideration should be given to using self-sealing 
breakaway fittings at each line-to-tank attachment point. 



















GUIDE R 
IRES (CO 


EL CO 


• Supportive 


Components 


Self-Sealing 

Breakaway 

Valves 


FUEL CONTAINMENT 


RECOMMENDED FEATURES 


Design to separate into two or more sections and seal 
the open ends of designated fluid-carrying passages. 
Openings may be in fuel/oil lines, tanks, pumps, 
fittings; Use of "one-shot" or quick disconnect types. ' 

I 

Desired locations: ! 

i 

• Fuel-carrying tank outlet I 

i 

• Fuel line network where extensive displacement is 
forecast, i.e., wing root, engine compartment 

• Connection between two fuel cells in direct 
side-by-side arrangement. 

Recess tank to line interconnect valves sufficiently into 
the tank, so that the tank half is flush with tank wall > 
or protrudes only a minimal distance beyond the tank wall! 
after separation. j 

Frangible interconnecting member of valves should meet j 

all operational and service loads with reasonable margin j 
but separate at 25% to 50% of the minimum failure load. ! 


Vents 

Avoid drain-out of the fluid when aircraft rolls to one 

side. 

j 

Avoid vent line failure at point of exit from the tank. 
Use short high-strength fittings between metal insert in 
the tank and vent line. 
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FUEL CONTAINMENT 


RECOMMENDED FEATURES 


Boost Pumps 


Vent line should be of wire-covered flex hose routed to 
avoid snags. 

Use siphon breaks and/or U-shaped traps in vent line 
routing onside the fuel tank. 

If vent lines are placed inside the fuel tank, they 
should be designed to operate in any attitude and allow a 
free flow of air while prohibiting a flow of fuel. They 
can be used in lieu of alternate considerations such as 
flexible lines or breakaway valves. 

Fuel systems that are pressure refueled should use a 
bypass system for tank over-pressurization. Insure that 
spillage resulting from overpressurization due to tank 
compression during a crash is released away from aircraft 
occupants and ignition sources. 


Fall into two categories: 

1. Tank- or line-mounted types which pressurize the fuel 
1 ines. 

2. Line or engine mounted type which suck fuel from the 
tanks and lines, creating a slight negative pressure 
in the fuel lines. 


The latter poses a lower threat for crash fires. 

If boost pumps are installed in the fuel tank, air-driven 
as opposed to electrically driven, is desirable. 

Attach pump rigidly bolted to fuel cell only. if 
supported or attached to the aircraft structure, a 
frangible attachment should be used. 
























TABLE 4-3. CRASH SURVIVAL DESIGN GUIDE RECOMMENDED FUEL CONTAINMENT DESIGN- 

FEATURES (CONT'D) 


FUEL CONTAINMENT 


RECOMMENDED FEATURES 


Filler Necks 


Design filler cap to remain with the tank by mounting it 
at or slightly below the tank wall surface. 


Recommend against filler necks unless frangible type is 
used. 


Quantity 

Sensors 


Avoid rigid attachment between the sensor entry 
the tank and the aircraft structure (make probe 
attachment frangible or use frangible structure 
type of attachment). 


-1 

into J 

mounting . 
for this i 


Avoid puncturing the tank by the long, rigid, tubular 
sensing probes. (Possibly mount the probe at a less 
hazardous angle or use curved, frangible, low-flexural- 
rigidity probes or probes equipped with load spreading 
shoes, fuel counters and float-and-arm tube sensors.) 


1 _ 

Sump 


Drains 


Design for maximum drainage without 
beyond the face of the tank. 


Fuel Do not locate in-line fuel drainers 

Strainers and compartment. 

Filters 


the drain protruding 


in the engine 


Do not mount directly on engine (engine affords some 
protection but proximity to the hot engine surfaces 
creates an additional hazard from ballistic hits). 


Design for 30G in any direction. 

Use self-sealing breakaway couplings to attach fuel lines 
to the fuel strainers. 



















MIL-STD-1290 is essentially a condensed version of the U.S. Amy Crash 
Survival Design Guide in military standard format. The crashworthy design 
techniques and analytical approaches discussed in the Design Guide were 
omitted and only the required results were retained. 

MIL-A-8865A is a U.S. Air Force document which provides a crash loads 
section in which load factors are specified for the longitudinal, vertical and 
lateral directions. The requirements are applicable to installation of: 
seats (crew, passenger, troop and litter), capsules, internal fuel tanks, 
mechanisms for holding canopies, door and other exits open for egress, 
equipment items, cargo, engines, and aerial delivery equipment. 

AR-56 is a U.S. Navy document which specifies crash loads and loading 
conditions which are applicable to the design of crew seats, passenger seats, 
troop seats, litters, capsules, mechanisms for holding canopies and doors in 
their open positions, attachments of equipment items, cargo, engines, fuel 
tanks, turrets, and aerial delivery equipment and their carry-through 
structures. The specification provides for ultimate inertia load factors and 
maximum impulse requirements. 

MIL-T-27422B specifies the test requirements for crash-resistant fuel 
tanks used in fixed-wing and rotary~wing aircraft for all departments and 
agencies of the Department of Defense. Composite construction tests include: 
constant rate tear, impact penetration, impact tear, panel strength, sitting 
strength. Cell tests include: Fuel resistance of exterior surface, crash 
impact, slosh resistance, gunfire resistance, aging and standing. Permability 
tests, as well as inner layer ply strength tests are also described. 

Tile fuel tank crash loads requirements for military aircraft are 
summarized in table 4-4. The applicable FAR 2 r > regulations crash load factors 
are also shown in table 4-4 for comparison. 
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TABLE 4-4. FUEL TANKS CRASH LOADS REQUIREMENTS 


AR-56 


SPECIFICATION 


MIL-8865A/6\ MIL-STD-1290 /4\ i FAR 25 


Forward 


45.0 (0.10) 


25.0 (0.20) 


25.0 (0.20) 
25.0 (0.20) 


Loads in "g's' 

Stacie, unidirectional loads 

Dynamic; time duration, seconds, in parenthesis. Specifies maximum 
impulse requirement. 


A Applied separately 
A Fuel tanks 1/2 full 
A FueL tanks 2/1 full 


4.2.3 Coverage by Existing Regulations and Advisory Circulars 

The coverage by existing Regulations and Advisory Circulars, pertaining 
to fuel tanks,/ce11s and systems and excerpted from references 50 to 53 are 
contained in Appendix C. 
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SECTION 5 

EVALUATION OF FUEL CONTAINMENT STRUCTURAL DESIGN CONCERTS 

5.1 WING FUEL TANKS 

Several fuel containment design concepts are presented in FAA Report 
ADS-19 "Structural Design of Fuel Containment Under Survivable Crash 
Conditions" (reference 10). These concepts fall into the following 
categories: 


Conventional fuel tank and rib design features (figure 5-1) 

Front spar design configurations (figure 5-2) 

Forward skin panel designs - impact resistance (figure 5-3) 

Front spar protection concepts (figure 5-4) 

Leading edge protection concepts - pole, tree impact (figure 5-5) 
Energy absorbing structures concepts (figure 5-6) 


The concepts and the associated comments from reference 10 are shown in 
figures 5-1 through 5-6, respectively. The following comments are based on 
the current study evaluation in light of the accident, test and analyses 
results: 


• Figure 5-1 - Conventional fuel tank and rib design features 

Typical current design does not require locally thickened skin for 
inertia or crash loads (a), (b). The skin is moderately thick over 
the entire chord for design loads and lightning protection. The rib 
construction shown in (c) is consistent with current technology 
aircraft. 

• Figure 5-2 - Front spar design 

Concept (a) requires that the front spar resist the puncture loads 
because the thick membrane will not perform that function. 

• Concept (b) is considered impractical because it is difficult to see 
how a sufficiently different beam can be designed to accommodate 
normal wing bending loads. 


f ■ ■ _ ■ 
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12 THE THICKER SKIN SHOWN IN THESE PANELS IS NOT ALWAYS REQUIRED. THE BASIC SKINS ON THE 
INBOARD WING SECTIONS OF LARGE AIRPLANES MAY BE ADEQUATE FOR ANTICIPATED IMPACT LOADS. A DUCTILE, 
TEAR RESISTANT MATERIAL SHOULD BE USED ON THE LOWER SURFACE 

3 ATTACHMENTS THROUGH SPAR CAPS, ESPECIALLY OUTER ROWS (FURTHEST FROM CAP RADIUS), SHOULD 
HAVE GOOD TENSION ALLOWABLES AND ADEQUATE BEARING AREA TO REDUCE STRESS CONCENTRATIONS 

4 CAP MATERIAL IS USUALLY DICTATED BY PRIMARY FLIGHT LOADS. ADDITIONAL CAP MATERIAL MAY BE 
REQUIRED IN THOSE DESIGNS HAVING INADEQUATE LOCAL BENDING STRENGTH TO DISTRIBUTE CONCENTRATED 
IMPACT LOADS 

5 STIFFENER SPACING SHOULD BE OPTIMIZED FOR CONCENTRATED IMPACT LOADING 

(a) FUEL TANK DESIGN 




Is HEAVY FORWARD SKINS 

6 THIS DIMENSION AND THE CORRESPONDING DIMENSION SHOWN IN (a) ABOVE IS A FUNCTION OF THE LOCAL BENDING 
AND CRUSHING STRENGTH REQUIRED TO DISTRIBUTE IMPACT LOAOS 

(hi FUEL TANK DESIGN 


7 ANALYTICAL WORK AND TEST RESULTS HAVE SHOWN THAT 
WEB TYPE RIBS HAVE GREATER CRASH RESISTANCE 

THAN TRUSS TYPE RIBS 

8 TESTS AND ENGINEERING ANALYSIS HAVE INDICATED THAT 
FULL INTERCOSTALING (FRONT SPAR TO REAR 

SPARI IS DESIRABLE. INTERCOSTALS SHOULD BE DESIGNED FOR 
TENSION LOAOS AS WELL AS SHEAR 

9 ALL ATTACHMENT PATTERNS SHOULD BE CRITICALLY 
ANALYZED FOR CRASH CONDITIONS 


-i ' 1 - 


I 




SECTION OF RIB 


(c) RIB DESIGN 


Figure 5-1. Conventional Fuel Tank and Rib Design Features 















Ji jj— 2024-T3 (VERY LIGHT GAGEI 


ADVANTAGES: 

1. HIGH FUEL INERTIAL PRESSURES CAN BE CONTAINED 


IN A LIGHT GAGE WING STRUCTURE 


2. THE FRONT SPAR CAN BE BROKEN OR PUNCTURED 
WITHOUT NECESSARILY SPILLING FUEL 


DISADVANTAGES. 

1. LOST VOLUME FOR FUEL IS APPROXIMATELY 2% 

2. FUEL SEALING AT THE RIBS IS DIFFICULT 

3. MANUFACTURING AND INSPECTION ARE 
COMPLICATED 


ADVANTAGES: 

1. HIGH FUEL INERTIAL PRESSURES CAN 
BE CONTAINED IN A WING WITH LIGHT 
GAGE SKINS AND SPAR WEBS 


2. THE HEAVY SPAR CAP FURNISHES 
GOOO IMPACT STRENGTH 


DISADVANTAGES: 

1. MATING AND RIVETING IS DIFFICULT 

2. RIB DESIGN AND WEB STIFFENING IS 
COMPLICATED 

3. FRONT SPAR CAP IS HEAVY ALTHOUGH 
USABLE AS WING BEAM MATERIAL 




NOTE: THESE CONCEPTS ARE PRIMARILY FOR THOSE APPLICATIONS WHERE THE CRITICAL LOADING RESULTS 
FROM INERTIAL FUEL PRESSURE 


Figure S-2 


Front Spar Design Configurations 































ADVANIA,. 1 .'; 


M v ' MU Lb 


1. JO uViPAC f RESISTANCE 


1. SAME AS AT LEFT 


2. PANELS INCREASE BENDING STRENGTH OF WING BOX, 
THEREFORE, OVER ALL WEIGHT INCREASE WILL 
BE SMALL 
DISADVANTAGES: 

1. CURING PROBLEMS ADD TO MANUFACTURING COSTS 

2. MANUFACTURING AND MAINTENANCE COSTS 
ARE INCREASED 


2 SAME AS AT LEFT 
3. PANELS CAN BE REMOVED 

DISADVANTAGES: 

1. MANUFACTURING COSTS HIGHER THAN 
MACHINED SKINS 


NOTE: THESE OESIGNS HAVE THE COMMON ADVANTAGE DF GOOD IMPACT RESISTANCE 
(a) SANDWICH CONSTRUCTION IN FORWARD SKIN PANELS 




FIRST STRINGER 



RIB 


ibi CORRUGATED SKIN CONFIGURATION 


0.040 ITYP.) 
=k= 


JzsZL 

PANEL CROSS SECTION 

WING CROSS SECTION 


0 063 

, ±_ 

El 


T" 

0 032 


0.345 




KIVF.TI'T) BONPKD 

uKUSS SECTION AT A RIB OR IMERuuolAL 

FIRST STRINGER 
MANUFACTURING PROCEDURE 

1. 1 4 IN THICK 2024 50 PLATE IS FORMED TO WING SURFACE CONTOURS 

2 FORMED PLATE IS HEAT TREATED AND THEN MACHINED 

3 0.063 OUTER AND 0.032 INNER HEAT TREATED SKINS ARE BONDED TO CORE 



10 SANDWICH 


‘•’itfnre 5-3. Korwanl Skin Panel Designs 


Impact Resistance 































ADVANTAGES: 

1. MULTI WEB OESIGN IS INHERENTLY GOOD FOR HITTING POSTS OR TREES AND FOR SLIDING OVER ROCKS OR 
HARD GROUND SINCE THE SKINS ARE THICKER THAN DN OTHER TYPES OF CONSTRUCTION 

2. THE BEADED WEB JUST AFT OF THE FRONT SPAR GIVES A COMPARTMENTATION EFFECT BY HINDERING 
FUEL MOVEMENT. NOTE THAT THIS POSSIBLE ADVANTAGE MAY NOT HOLD FOR HIGHLY SWEPT WINGS 

DISADVANTAGES: 

1. THE SHEAR STRENGTH BETWEEN THE UPPER AND LOWER SKINS IS LIMITED BECAUSE OF THE VERY LARGE 
RIB SPACING USUALLY FOUND IN MULTI WEB CONFIGURATIONS. A LARGE LOAD ON THE LOWER SURFACE 
(SUCH AS THAT ENCOUNTERED WHILE PLOWING THROUGH SOFT EARTH OR POSSIBLY WHILE DITCHINGI 
WILL TEND TO COLLAPSE THE LOWER SKIN AFT WITH RESPECT TO THE UPPER SURFACE 

2. DESIGN ALLOWS LESS DEVIATION FROM ORIGINAL LAYOUT SINCE CUTOUTS AND LOCAL LOAD 
CONCENTRATIONS CANNOT BE ACCOMMOOATEO EFFICIENTLY 

(al MULTI WEB POST CONFIGURATION 



ADVANTAGES: 

1. GOOD DESIGN FOR MOST CRASH TYPE LOADINGS 

2. THE ADDED WEIGHT IS STRUCTURAL. THE EFFECT 
ON OVER ALL WING WEIGHT IS THEREFORE 
LESSENED 

DISADVANTAGES: 

1. DESIGN ANO FABRICATION IS COMPLEX 

2. MANUFACTURING AND MAINTENANCE 
INSPECTION IS DIFFICULT 


(bl BOLT ON BONDED FORWARD BAY 



1 IMPACT IN THE FRONT SPAR REGION IS LESS CRITICAL 
2. THE ADDED MATERIAL IS STRUCTURAL 

DISADVANTAGES 

1 EXTRA MACHINING ANO INHERENT WASTE MATERIAL ADD TO THE COST OF THE CONFIGURATION SHOWN. 
! ci FUEL CONTAINMENT FOR DELTA WINGS WHEN FUEL SPACE IS NOT CRITICAL 


K i I’urt' S—V 


Front Spar Protection Concepts 

































NOTE: 1. ANY WEIGHT ADDED TO THE LEADING EDGE IS DEAD WEIGHT LEADING EDGES SELDOM ADD TO THE 
STRENGTH OF THE WING SOX. EVEN A STRUCTURAL LEADING EDGE CAN ADD LITTLE TO THE BENDING 
STRENGTH OF THE WING BOX 

2 IF LEADING EDGE LIFT DEVICES ARE USED. THE PROBLEM BECOMES ONE OF PROTECTING THE FRONT 

SPAR FROM PUNCTURE BY LEADING EDGE ELEMENTS RATHER THAN OF THE LEADING EDGE PROTECTING . a , 
THE WING FUEL TANKS 

3 ANY LEADING EDGE PROTECTION DEVICE WHICH ABSORBS IMPACT LOADS MUST BE BACKED UP BY 
SUBSTANTIAL MAIN BOX STRUCTURE TO DISTRIBUTE THE LOADS 

4. ANTI ICING PROVISIONS ARE LIMITED IF THE LEADING EDGE PROTECTION DEVICES ARE INCORPORATED 
IN AN ALREADY CROWDED AREA 



HINGE JOINT 


TYPICAL SLAT 



STRENGTHENED FOREBODV 
WITH ANTI ICING PROVISIONS 


ibi 


VIEW A 



NOTE IN THIS ARRANGEMENT THAT PART OF THE LEADING EDGE AFT OF THE SLAT IS STRENGTHENED FOR 
IMPACT LOADING PROVISIONS FOR ANII ICING ARE INCLUDED 


Figure 5-5 


l,?.i>linp Kdt'e Protection Concepts 


Pole Tree 


! in par t 
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ALUM. HONEYCOMB 

11 4 5052 - 004 7.9 LB. CU.FT3, t ar = 1,500 PSD 


WORK = 8 


/24,000 \ - 96,000 FT. LB 

! n I nrD rnnr cda 


Wt ^7.9 11.1) 


64 v 3.86 LB 


PER FOOT SPAN ^ ^ 24,000 LB. PER INCH SPAN 
orin 0 LB. PER INCH SPAN 


-,. a 144 , PER poor SPAN 

NOTES: 1. RIBS ANO OR SKIN MUST 8E STRENGTHENED TO DISTRIBUTE HIGH LOCAL LOADS 

2. SPAR MUST BE INSPECTED FROM i JSIOE 

3. ANTI ICING AND HIGH LIFT DEVICES ARE SPACE LIMITED 

4. THERE MUST BE LOCAL INTERRUPTIONS OF CORE FOR ACTUATORS, TRACKS, PLUMBING. ETC 

lai ENERGY ABSORBING STRUCTURES 


ASSUMING 4 LB CU FT. CORE ANO 16 IN. x 10 IN. BAY SIZE 

Wt - 4 ( ) = 4.44 LB. PER FT. OF SPAN 

' 144 ' 


fuel loss - (nTimsi) ’ 2 32 °° 0f 
0.1 <17281 CORE (0.1 


BAY WITH 

0.2% OF TOTAL FUEL) 


TRUSS GRID CORE 
WITH FUEL 


TRUSS SPAR 


NOTES: 1. TANK PURGING IS DIFFICULT _ 

2. BACTERIAL GROWTH PROBLEM IS COMPOUNDED UNLESS CORE IS FIBERGLASS 
3 FUEL MAY STILL POUR OUT AFTER A CRASH BUT FIRE CAN ONLY BURN AS FAST AS FUEL IS SUPPLIED 
4. BOND TO SKINS IS CRITICAL FOR DISTRIBUTING IMPACT LOADS 

_ 5. CRUSHING ENERGY IS MORE THAN DOUBLE THAT OF CONFIGURATION SHOWN IN la). AND ONSET 
RATE IS HIGHER 

ihi ENERGY ABSORBING STRUCTURES 


/INTERCOSTAL 


TRUSS GRID 


J "v\ / RIB N0TES 1 THE TRUSS GRID SANDWICH IS 

\\ X ENERGY ABSORBING. THE HONEYCOMB 

V\ SERVES AS "WADDING'' FOR 

X I X m ° X PARTIAL SEAIING DURING CRUSHING 

■ , X 1 --4 OF THE TRUSS GRID STRUCTURE 

2 ALL MATERIAL IS STRUCTURAL 

3 WITH PERFORATED SANDWICH STRUCTURE FUEL LOSS IS MINIMIZED BUT MAINTENANCE IS 

COMPOUNDED THEREFORE IT SEEMS ADVANTAGEOUS TO SEAL THE TANK AT THE INNER FACES OF 
THE SANDWICH 

4 RIB DESIGN IN THE FORWARD BAY IS COMPLICATED BUT NUMBER OF RIBS CAN BE KEPT SMALL SINCE 
SKINS ARE STABILIZED 

l c 1 ENERGY ABSORBING STRUCTURES 

!•’ i >» 11 r«• S-h. K'i(> r >* v AiKornntit m rue Lines v.uik <-i. 1 




















HONEYCOMB 



CRUSHING OF CORE 1.500 PS) 

WITH AN AVERAGE THICKNESS - 1 IN. 
p - 2 Il,500i - 3,000 LB IN. 

WORK - 3.000 (1) - 3 000 FT. LB IN 
FOR A 1 IN. SPAN. 

WORK - 36.000 LB. INSIGNIFICANT' 


!dl ENERGY ABSORBING STRULTURES 



NOTE: THIS DESIGN IS RETRICTED TO CUTTING DOWN TREES OR POLES. THE ADDED WEIGHT CANNOT INCREASE 
THE BASIC STRENGTH OF THE WING AND. THEREFORE. IS DEAD WEIGHT 

le) ENERGY ABSORBING STRUCTURES 



NOTES 1. THIS DESIGN CAN ABSORB IMPACT LOADS AND ENERGIES COMPARABLE TO THE DESIGN SHOWN IN FIGURE 5 6(a) 

2. ALL WEIGHT EXCEPT FOR THE FILLER IS STRUCTURAL IN WING BENDING 

3. THE DESIGN IS DIFFICULT IF THE FAILURE PATTERN SHOWN IS TO BE FOOLPROOF 

If' ENERGY ABSORBING 
STRUCTURES 


SPAN 


F‘iri'ir« 5-H. 


Kn<_*r*;y Abs.»rbi *>>’ St rniTurus Conn-pis ( Cont ' 

























Improved inertia fuel pressure design is not considered a high crash 
design priority based on available accident and crash test data. 
Present wing designs meet survivable crash g loads. Mounting of 
components on wing spar in current designs is often feasible. 

Figure 5-3 - Forward skin panel 

Concept (a) which uses honeycomb material is not considered 
appropriate for an integral wing fuel tank, in commercial application 
because it is prone to leakage, difficult to maintain and susceptible 
to lightning. Concepts (b) and (c) represent lightweight viable 
approaches for new design. However, the benefit must be traded off 
against repairabi1ity , volumetric efficiency, cost, lightning 
protect ion. 

It appears that these designs provide better bending strength and/or 
protection from impact of the forward upper skin. However, based on 
accident and test results, this may not be a critical crash loading 
condition 

Figure 5-4 - Front spar protection 

Crash performance of the multiweb post, concept (a), depends on the 
riD configurations and frequency. It presents problems with regard to 
draining fuel and/or getting fuel to surge boxes. 

Honeycomb crush material is not desirable for wet cells as noted for 
figure 5-3 concepts and prevents mounting of components on front spar. 
Delta-wing concept (c) is acceptable for fuel dry bay provided the 
volume or capacity of fuel is not needed. Obviously, a big penalty 
for non-Deita wing designs. 

AIL these concepts may protect against tree or pole impact, but could 
be detrimental during siideout because large loads on lower surface 
could collapse lower skin. 

Figure 5-5 - Leading edge protection 

These concepts can be considered only if functionally practical, that 
is, doesn't interfere with operational systems; i.e., anti-icing. 

Also requires strengthened backup structure to distribute loads. 

Figure 5-6 - Knergy-absorbing devices 

Honeycomb sections (a) and (b) are not viable for fuel use as stated 
earlier. Concept (c) is acceptable structurally provided bay is dry. 
Concept (dl doesn't appear to provide adequate protection, particu¬ 
larly from puncture;. Concept (e) has little merit. The cable and 
shock-absorbing support is essentially present on most wings, now in 















the form of ducting, electrical harnesses and cables. Would provide 
protection for a "select" impact condition only. Concept (f) is 
difficult when bay is wet. However, if dry bay is acceptable 
(trade-off volume, capacity), the design could be less complicated. 

In general, only small amount of energy will be absorbed and 
penetration of the fuel cells could take place. The concepts may act 
more like a shock-absorber. It is suspected that these approaches 
would provide limited protection. these designs, generally, 
complicate mounting of components on the front spar. 


Table 5-1 lists the various design concepts with regard to trade-offs 

between potential benefits and adverse considerations. While those which have 
merit for further consideration are noted, the individual concepts are not 
ranked. Based on the review of these concepts it is concluded that: 


• inertia loads are satisfactorily accommodated by conventional 
current-day plank and stringer design. 

• Design for pole and/or tree impact should be considered if the penalty 
Is small and the benefit Is substantial. It will be difficult to 
eliminate fuel tank penetration altogether. 

• Consideration should be given to minimizing the fuel spillage 
resulting from penetration by an obstacle or a distributed load; i.e., 
Inclined mound. For example, as CRTS wing design could involve 
conventional plank and stringer skins, several fuel tank ribs breaking 
up ihe tankage spanwise using ribs similar to that shown in figure 
5-1, concept (c) and applying structural design techniques to carry 
leading edge impact loads to the wing planks. 

• A total system concept of reducing fuel spillage should include not 
only potential structural design concepts but valving and fittings to 
shut-off fuel (low during or subsequent to an impact. 


5 .I FUShLACC FURL TANKS 

Current commercial aircraft typically carry iut1 in tire wings. However, 
i some designs operational requirements dictate the provision of fuel tankage 
tne fuselage. The fuel that is in the body may be located in the 
- .c-uri/ed area (center wing) or in the pressurized area (e.g., the cargo 

Typically, the center wing tank is also an integral tank but it 
• : ‘>m t lie personnel compartment by a fume-proof and fuel-proof 
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enclosure as required by Federal Aviation Regulations paragraph 29.9b7. Fuel 
tanks such as the center wing tank which are located within the body contour 
are designed to meet the g loads prescribed tor emergency landing FAR do.5b I 
and 25.9bJ. When fuel is placed in the fuselage it is in closer proximity to 
the passengers as compared to the wing tank locations. As the accident data 
indicate, there is as propensity for fuselage lower surface damage in the more 
severe crashes. The accident data also show that under severe impact con¬ 
ditions the fuselage will normally break at locations of structural disconti¬ 
nuity. Particular attention must be paid to fuselage tank designs to 

minimize the risk of fuel spillage under those severe crash conditions. The 
following three contemporary fuselage tank configurations are examined with 
regard to their crash resistant features. 

• Bladder fuel cells fitted in the lower fuselage 

• Bladder-supported within a dedicated structural box 

• Double wall cylindrical strap-in auxiliary tanks 

• ' Bladder FueJ.Ce 11 s Fitted in The Lower Fuselage 

A current example of this type of tank configuration is in a 
commercial wide-body transport airplane in which the bladder fuel 
cells are located below the wing and between the front and rear spars 
of the wing carry-through structure. Maximum utilization of 
available volume is achieved by conforming a bladder cell to the 
fuselage contour. Figure 5-7 shows a fuel cell layout. In the 
military version of this airplane, a three-ceii tank is Located in 
the forward lower cargo compartment and a four-cell tank is located 
in tlie aft lower cargo compartment. Access for maintenance and 
inspection is provided through the bottom of the fuselage to each 
cell. 1'he fuel lines are located away from the bottom of the tanks 
and provide protection against hazards such as collapsing 
fuselage-mounted landing gear, whe 'l.s-up landings, and off-runway 
incidents. 

Crash Resistant Features 

• The cell is located below the wing between the front and rear 

spars of the wing carry-through structure, thus avoiding a likely 
fuselage break location. 




















Figure 5-7. Bladder Cell Installation Wide-body Transport Airplane 

• bulkheads and beams provide stiffness and crash support in the event 
of an impart in which the mid-fuselage lower surface makes contact 
with the ground (i.e., gears retracted). 

• Fuel system components are within the cell and located away from the 
most vulnerable surface during a crash impact. 

• Trie use of a bladder reduces the likelihood of a massive leak, which 
reduces the chances of fuel reaching an ignition point and also 
provides more egress time. 

Potential improvements 

• The bladder material used is MKJ , ’bl96. A more tear/crash resistant 
material should provide additional protection. 

• Use of sandwich construction or equivalent design between the tank 
cell and the lower fuselage skin below would afford energy-absorbing 
crushable structure in a region where impact with the ground could 
occur . 





















Bladder Supported Within a Dedicated Structural Bov 


This type of configuration is in use in current narrow-body and 
wide-body transport airplanes. The structural boxes are generally 
made of externally stiffened panels and are designed to support tie 
bladder cell for all operational conditions, including the crash 
environment. This type of tank, is generally located in the lower 
fuselage cargo compartment. The designs reviewed employ integral 
fitting attachments in the box to transfer all the loads to the 
aircraft floor and airframe shell at specific locations through 
predetermined load paths. The location of the fuselage fuel tanks 
a current wide-body (cargo version) airplane is shown in figure 5-8 
The general arrangement of the tank and its construction are 
illustrated in figure 5-9. The load paths for wide-body aircraft i. 
shown in figure 5—10. In this design, gaps are maintained outboard 
of the upper tank box fittings to assure that the tank box does not 
experience loads from the fuselage. 


\\ U FUEL TANKS 


\\ 



Figure 5-8. Location of Fuselage Fuel Tanks in Wide-body Transport 
Category Airplane, Tanker Configuration 
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+VE LOAD CONVENTION 
(LOADS APPLIED TO A/C) 

FLIGHT LOAOS ONLY - 
POINT A - VERTICAL AND DRAG LOAD ONIY 
POINT B - VERTICAL, DRAG AND SIDE ONLY 
POINT C - VERTICAL LOAD ONLY 
POINT D - VERTICAL AND SIDE LOAD ONLY 

CRASH CONDITION - 

POINT E & F - FWD LOAD ONLY BY VIRTUE OF 
SLOPPY LINK 

POINT E, F, G, H - SIDE LOADS USING BUFFER PADS 
ON CORNERS ONTO FLOOR BEAM 
POINTS A D - AS FOR FLIGHT CONDITIONS 
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Figure 5-10. Wide-body Aircraft Fuselage Fuel Tank Load-Paths 

The general arrangement of an installation in a narrow-body airplane 
is shown in figure 5-11. The body tank is supported from the 
passenger floor beams and the fuselage frames. The tank is composed 
of an aluminum honeycomb outer shell with two bladder Cells inside. 
The tank is supported in such a manner as to preclude body structure 
deflections to load the fuel tank and clearances are provided around 
the tank to adjacent structure. 

The fuel tank (figure 5-12) consists of two modules which are 
constructed oi hot bonded aluminum honeycomb panels fastened logethe 
with angles. This is a typical corner oi the tank. Honeycomb 
thickness varies from 1/2 Inch to 1 3/4 inch with face sheets of o.p 
to 0.07. The face sheets have corrosion inhibiting adhesive primer 
applied prior to bonding and t hey receive an additional coat <>? pa: i: 
after bonding. Dense core is provided for stability in fastener 
attachment areas. Edges of the panels ire potted. Panels are 
fastened together with angles by bolts and lockbolts, A tvpi <"i; 
insert consists of a metal plate which is bonded to the tank panels 
These are used for ft: 1, vent and drain line penetration and tor 
access door attachment. A typical module joint consists of angles 
bolting the tank walls to the intermediate bulkhead. An external 
splice plate is installed in selected locations. The tank is 
pressure-sealed on the inside by fillet sealing fasteners, angle 
fittings, etc. Corrosion protect ion sealing is added to selected 
areas on the outside of the tank. 
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Figure 5-11. Fuel Tank General Arrangement, Narrow-Body 
Transport Airplane 

Forward and aft loads are reacted into the skin through fittings and 
two struts, one strut on each side of the tank. The struts attach 
at pin joints on both the tank and the body structure. Spherical 
bearings are installed at both joints to provide for relative 
movement between the tank and structure due to fuselage deflections 
from pressure and tank loads. Tank loads are transferred into the 
frames and skin by added support structure between body frames. The 
tank attachment layout is shown in figure 5-13. 

The fuel and vent lines that connect the auxiliary tanks to the main 
fuel system incorporate drainable and vented shrouds. Additionally, 
these lines are either designed to break away from the auxiliary 
tank or sufficient stretch is provided to accommodate tank movement 
without causing fuel spillage. Hoses that are required to stretch 
are subjected to what is referred to as the guillotine test. The 
hose is pressurized and clamped at both ends to simulate its 
mounting in the aircraft, then a sharp-pointed load is applied in 
the middle ot the hose. The hose must not leak when stretched to 
its maximum. 

















TYPICAL 

CORNER ATTACHMENT 


TYPICAL INTERMEDIATE 
BULKHEAD ATTACHMENT 



PRESSURE SEALING 



TYPICAL MACHINED INSERT INSTALLATION 
FOR ATTACHMENT OF FUEL SYSTEM FITTING 


Figure 5-12 


Fuei Tank Shell Construction 


































• The location provides adequate crush distance above the fuselage 
lower skin and avoids placement in the fuselage where breaks 
typically occur. 

• There is separation from the passenger compartment. 

• The use of bladder cells within dedicated structure provided added 
protection from puncture. 

• The designs allow for tank displacement to minimize or reduce fuel 
line breakage. 

• Design to meet, or exceed, FAR requirements. 

• The separately contained cells are designed to react crash loads 
via predetermined load-path considerations. 

Potential Improvements 

• The use of self-sealing breakaway fittings to assure that fuel 
spillage is minimized in the event of large displacement. 

• Use of a more tear-resistant bladder material. 


Double Wall Cylindrical Strap-in Auxiliary Tanks 

The supplemental fuel system employed by one airline for its 
narrow-body transport airplanes involves the use of quick-mounting 
easily removable fuselage fuel tanks. The complete supplemental 
system consists of double-wall tanks, a cockpit auxiliary fuel panel, 
a refueli.ng/defuel ing panel accessible to ground service personnel, 
fuel lines connecting the supplemental system to the main tanks, and 
electrical/electronic systems for fuel monitoring and flow control. 
The tanks are installed in the cargo compartment. They are struc¬ 
turally supported in cradles attached to the passenger cabin floor 
beams (figure 5-14). This approach permits the installation of from 
one (1) to ten (10) fuel tanks with added capacity of up to a maximum 
of 2530 gallons. Removability of the tanks also simplifies the 
maintenance of the lower/inner airframe and/or components within the 
fuselage center section. No fuel transfer pumps are used. Fuel 
transfer is accomplished from the cockpit by closing the vent valve, 
opening the air pressure vaLve and selecting the appropriate tank. 

The installed weight ratio of the complete supplemental system is .92 
lb/gal. The system is designed to meet FAR25 crashworthiness 


























































SECTION 6 


STATE-OF-THE-ART TECHNOLOGY 

6.1 SUMMARY OF TRANSPORT A IR PL ANE DATA 

Transport airplane accident, test and analyses data are presented in 
Section 3. Table 6-1 summarizes the crash scenario related data. The 
accident records show three potential scenarios. The full-scale and section 
tests address various aspects of the candidate crash scenarios. The 
analytical studies which are performed in support of the scenarios (except for 
the obstacle penetration loads) indicate levels of fuselage crush and dynamic 
pulses which are considered to be at or below airframe structural integrity 
limits as defined by ultimate vertical shears and bending moments. Table 6-2 
describes the accident data that relates to fuel containment. Full-scale and 
section test data which are applicable to the various fuel spillage results 
are noted. The analyses results are the same as stated in table 6-1. The 
fuselage located tanks are exposed to the same crush and loading environments 
is noted for the air-to-ground and ground-to-ground scenarios, without 
obstructions. The wing responses obtained in the analyses indicated that wing 
strength integrity would be maintained for about the same level of impact 
velocity as that for the fuselage. Thus, similar dynamic pulses are 
suggested. In addition to the dynamic pulses, the static design requirements 
specified in FAR-25 apply. The data associated with concentrated and 
distributed load tests are presented in Section 3.2.3. Table 3-5 summarizes 
the type's and ranges for the various tests, as well as the results. 

6.2 POST-CRASH FIRE REDUCTION ASSESSMENT 

Figure 6-1 depicts the accident events that can lead to the fire hazard. 
The main gear can collapse or separate during an air-to-ground impact or 
during a ground slide-out. Its collapse can lead to several subsequent 
failures including wing overload, engine separation, lower wing surface tear, 

* ue1 tank penetration, and fuselage break. Obstacles can provide concentrated 
loads acting to penetrate the wing and/or fuel tank structure (i.e., trees, 
poles, rocks) or distributed loads (i.e., mound, vertical obstructions) to 
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TABLE 6-3. THE RELATIONSHIP BETWEEN DESIGN APPROACH AND STRUCTURAL 
FAILURE 


Structural Failure 


• Engine Separation 


• Wing Overload 


• Lower Wing Tear/Slide-Out Friction 


Landing Gear Penetration 


• Fuselage Crush 


• Tree/Obstacle Impact 


Potential Applicable Design 
Approaches 


Breakaway Valves, Flow 
Restrictors, Seal Design, 

Frangible Fittings 

Tank Material/Strength, Pressure 
Relief, Tank Isolation 

Ductile Lower Wing Material, Lower 
Front Spar Reinforcement, Skin 
Doublers 

Bladder Tank (Fuselage), Crushable 
Structure, Attachment Fittings, i 
Breakaway Valves 

Bladder Tank, Crushable Structure, 
Tank Fittings 

Leading Edge Reinforcement, Double 
Wall Separation, Front Spar 
Reinforcement, Foam Liner 


Table 6-4 shows several areas where improvements provide potential for 
reducing the wing fuel tank fire hazard. Along with each potential area, 
supporting accident data and some conceptual design considerations are also 
provided. A brief discussion of the assessment of the post-crash fire hazard 
reduction for wing fuel tanks is described below: 

l. System Approach - 

Accident data shows that fuel tank spillage generally results in 
post-crash fires. Ruptured fuel tanks and fuel lines are the 
ultimate cause regardless of what events or structural failures 
initiate the fuel tank/line rupture. The more moderate or limited 
the spill the better chance to avoid the post-crash fire and allow 
occupants more exit access and evacuation time. 

























SYSTEMS APPROACH TO REF. 1 DATA: 67 FUEL TANK SPILLAGE OCCURRENCES FOR 94 WING MINIMIZE FUEL FLOW HAZARD 

REDUCE POST IMPACT POD ENGINE AIRCRAFT RESULTED IN 41 FUEL LINE FIRES AND 4 • COMPARTMENTIZE FUEL TANKS 

FUEL FLOW FUEL LINE FIRES WITHOUT TANK SPILLS. IN ADDITION, 6 FUEL LINE • FRANGIBLE FITTING 
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A potential resolution of this hazard is to minimize the flow race 
and volume during the post-impact period. A design approach that 
includes a Crash Resistance Fuel System (CRFS) is a logical 
consideration. For example, compartmentizing the wing fuel tanks in 
the spanwise direction with appropriate Interconnecting components 
which consist of frangible and self-sealing attachments, breakaway 
valves, and flexible lines could help reduce fuel volume loss and 
rate of flow. This approach essentially involves meticulous 
attention to good detail design practice. The CRFS concept, except 
for the lack of crash resistant bladder type cells, which is 
difficult for most wing contours, is followed by rotary-wing aircraft 
manufacturers. 


Reduced Potential for Wing Breakup - 

Fuel tank rupture occurs often as a result of concentrated and/or 
distributed loads. Accident data have shown that the major 
contributions to these types of loading are trees/poles, vertical 
obstructions, inclined mounds, and ground drag. To a lesser extent, 
fuel inertia loading has been mentioned as a contributor. However, 
tests and analyses data show that current aircraft design for this 
type of loading is adequate. Thus, it is surmised that excessive 
fuel Inertia loading occurs at extreme accident conditions and/or in 
conjunction with other contributors. It would appear that a 
realistic approach to this type of problem is to increase resistance 
to concentrated and distributed loads by considering one or more of 
such design alternatives as: 

• stronger front spar caps 

• increased upper forward skin thickness in chordwise direction 

• use of webbed ribs in lieu of truss ribs 

• use of full intercostal from front to rear spar 

To consummate this approach the impact environment (i.e., velocity, 
obstacle) has to be defined. The accident data and previous R&D 
efforts have been reviewed for this purpose. For example, the 
literature review has shown that tests involving impacts of both 
unmodified and modified DC-7 wings at 40 ft/sec (27 mi/hr) with a 
steel pole have been performed. The accident data how that airplane 
fuselage breakup, in which a relatively high percentage (> 30 
percent) of onboard fatalities occur, is at an average forward 
velocity more like 135 ft/sec. 

Improved Wing Lower Surface Tear Resistance - 

Accident data show that there are 8 known and 17 probable occurrences 
of lower surface tear leading to wing tank rupture. Forty (40) 
percent of these events had fire related fatalities. This type 












I 








of failure generally occurs as a result of either landing gear or 
engine pylon separation allowing high aft ground loads to act 
directly on the lower surface. 

The combination of more materials in the lower spar cap and skin 
panel, which are more ductile and resist ignition better, are 
desirable. Materials like 2219-T4 and 2020-T4 probably provide the 
highest tear resistance and ductility. 7075-T7657 is currently used 
because it has a high strength and good corrosion resistance, which 
are essential requirements. However, 7075-T7657 has only fair 
ductility and tear resistance. 

Since most of the fires associated with this type of failure tend to 
be localized in the wing area, some of the previous approaches to 
limit fuel flow might be appropriate. 

Prevention of Fuel Tank Rupture Due to Gear/Pylon Separation - 

Landing gear and engine pylon separation/collapse are major 
contributors in accidents which result in fuel spills and subsequent 
fires. Their contributions are more indirect in that other 
structural systems or elements can fail and lead to fuel tank/line 
rupture and penetration. 

Ideally, the designs of landing gear and engine attachments and 
failure modes should assure proper fusing for a clean overload. The 
current FAR25 requirements specifically state in P25.721(a) that a 
landing gear failure will not result in spillage of enough fuel from 
any part of the fuel system to constitute a fire hazard, and (b) the 
airplane must be capable of landing on a paved runway with one or 
more landing gear legs not extended without sustaining a structural 
component failure that is likely to cause spillage of enough fuel to 
constitute a fire hazard. Current large transport airplane landing 
gears have breakaway provisions designed to meet P25.721 as noted in 
figure 6-2. 

It is common for wing-mounted engines to separate during crash impact 
conditions. For example, a current wide-body airplane design (figure 
6-3) has the engine attached to the pylon at two locations. The 
pylon attaches to the wing at the front spar through forward inboard 
and outboard joints and to the wing rear spar via a drag strut. The 
design of the engine/pvlon/wing installation is such that the engine 
will separate cleanly before the wing (or fuselage) structure is 
overstressed. To prevent wing box tear and/or minimize post-crash 
tuel flow requires proper fusing for both the respective landing gear 
and wing pylon attachments to ensure clean separation. A review of 
the designs to perform properly at the survivable crash envelope 
would be appropriate. Developing more tolerant designs in the sense 
that they would not separate or collapse is probably unrealistic. 
However, assuring restricted fuel flow after collapse, by 
incorporating design features noted for Item Number 1, has merit. 
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BOLTS AND TWO SHEAR PINS, A METHOD OF ATTACHMENT 
WHICH PERMITS REMOVAL OF THE ENGINE AND ITS MOUNTS 
WITHOUT DISCONNECTING THE MOUNTING LINKS FROM THF 
ENGINE. 











Table 6-5 shows areas where Improvements provide the potential for 
reducing the post-crash fire hazard for fuselage fuel tanks. A brief 
discussion of this assessment is provided: 

1. Location of fuel tank- and components - 

The fuselage fuel tank crash environment differs somewhat from that 
of the wing fuel tank. Analyses have shown that during air-to-ground 
impacts with initial sink velocities in excess of 22 ft/sec at a flat 
(zero-degree) pitch attitude there is the likelihood that the 
fuselage shell will break due to shear and/or bending moments 
exceeding the design strength. Similarly, the analyses results 
indicate fuselage underside crushing of 14 in. to 24 in. from the 
forward to aft locations. Additional preliminary analyses have also 
indicated that slope impacts as the airplane traverses the terrain 
having lost its main and nose landing gears could produce fuselage 
failure loads for effective normal velocities (ENV, forward velocity 
times the sine of slope angle) in excess of 20 ft/sec for inclines of 
8 degrees or greater. The accident data suggest that during the 
post-impact slide-out phase 6.3% of the onboard occupants were 
fatalities at relatively low forward velocities, 57 knts (96 ft/sec), 
average into an obstacle. The percentage ratio increases to 77.8 at 
an average velocity of 136 knts (229 ft/sec). Major breaks will 
occur as anticipated at hard points and production breaks. 

The design of fuselage fuel tank installations should take into 
account vulnerable areas such as where breaks occur and where 
substantial crush is anticipated. Loss of underside structure could 
expose fuel tanks and components to obstructions such as jagged rocks 
and terrain. However, if the tanks are located at substantial 
distances above the ground line, this problem should be minimized. 

The crash impact loads, dynamic and/or static equivalents should be 
applied in the design of the tank system and installation. The U.S. 
Army Crash Survival Design Guide, which addresses fuselage fuel tank 
systems mostly, provides some guidelines in this respect. The SAFER 
committee concluded in 1979 that the installation of CRFS in fuselage 
cargo compartments was feasible. 

2. System Approach - 

Accident data show that fuselage lower surface tear occurred in at 
least 57 accidents and that 17.5% of onboard occupants were 
fatalities. These data, along with fuselage breakup accident and 
analyses results, indicate that fuel tanks located in the fuselage 
contour are exposed to significant crash forces in a large number of 
accidents. While the environment for wing tanks may be more severe 
in some respects, minimization of fuel flow from fuselage tanks is 
important. 











UUli 




z 

c 

M 

H 

CJ 

ZD 

O 

U1 

D£ 


< 

N 

< 


U- 


cn 

< 

cj 

i 


c 

c- 

a£ 

C 

a- 


2 

o 


CO 

w 

C 


* 

2 

< 

H 


CxJ 

o 

< 

J 

« 

CO 

Z3 

U. 

I 

H 

CO 

CO 

Cd 

CO 

CO 


in 

I 

vO 



6-12 


► 

IP 




. • « *.. r. ■'.«". 

-YZtZb 






V"i 


3 



; 


4 


3 

















Some current transport category aircraft have fuel tanks located 
within the pressurized area, typically the cargo compartment. 
Particular attention is paid to these designs to minimize the risk of 
fuel spillage. A typical design, shown in figure 5-11, may be 
supported from the floor beams. Tanks located within the body 
contour are designed to meet load prescribed for emergency landing 
FAR25.561 and 25.963, described below: 


• FAR25.561 "G" Loads 

Forward 9.0g 
Downward 4.5g 
Upward 2.0g 
Sideward 1.5g 


FAR25.963 


BCAR Loads* 

Forward 9.0g 
Downward 4.5g 
Upward 4.5g 
Sideward 2.25g 
Rearward 1.5g 

*A11 combinations of inertia 
forces 


Fuel tanks within the fuselage contour must be able to resist 
rupture and to retain fuel under the inertia forces prescribed for 
the emergency landing condition in P25.561. In addition, these 
tanks must be in a protected position so that exposure of the 
tanks to scraping action along the ground is unlikely. 


The incorporation of CRFS in fuselage contours is within the state-of- 
the-art. In some instances design features, as prescribed by the U.S. Army 
Survival Design Guide, may be applied to current aircraft. These designs, in 
light of recent accident and analyses data, should be evaluated. The 
definition of the crash environment parameter is important in order to assess 
the adequacy of designs. 

6.3 COMPARISON OF DESIGN REQUIREMENTS AND CURRENT PROCEDURES 

The fuel containment requirements, as suggested by the U.S. Army Crash 
Survival Design Guide, are compared with current transport airplane 
requirements and contemporary design practices in table 6-6. Table 6-6 
contains 5 columns. Column No. 1 describes the item to be considered (e.g., 
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fuel tank, fuel lines, components). Column No. 2 presents a description of 
applicable recommended features as noted in the U.S. Army Crash Survival 
Design Guide. Column No. 3 defines applicable FAR25 and BCAR regulations. 
Column No. A contains a description of verbiage contained in the "Auxiliary 
Fuel System Installation Advisory Circular”. The last column (No. 5) lists 
current design practices as surveyed from the three major domestic airplane 
manufacturers. The following observations are noted: 

• The U.S. Army Survival Design Guide is oriented primarily for rotary¬ 
wing military aircraft where fuel tanks are contained in the fuselage 
and the emphasis is on crash-resistant fuel systems. These systems do 
impose weight and volume penalties. The fact that a feature is 
recommended by the U.S. Army does not assure that it is desirable or 
necessary. 

• The FAR25, FAR121, and BCAR regulations rarely will address the items 
of consideration in the same manner as the U.S. Army Design Guide. 
However, many of the features that are described in the latter 
documentation are alluded to in the regulations. 

• The advisory circular on auxiliary fuel system installation, in some 
respects, is more like the U.S. Army Design Guide since it is 
applicable to fuel tanks contained in the fuselage. 

• The description of transport category airplane manufacturer 
contemporary design practices encompasses the three domestic 
manufacturers. It is difficult to make direct match-ups with U.S. 

Army recommended features because the three manufacturers a) do not 
design alike in all areas of concern, b) have variations in model 
sizes and configurations, c) have different design philosophies, and 
d) do not all have auxiliary fuselage (cargo area) tanks. Thus, the 
comments contained in Column No. 5 are not necessarily representative 
of all current design approaches, but rather a cross-section. 

Table 6-7 shows a comparison of fuel system installation integrity 
considerations. Six areas of concern are compared. It appears that the 
transport category airplane regulations and requirements are more specific in 
this area than the U.S. Army Design Guide. 


















6.4 DISCUSSION WITH ROTARY-WING AIRCRAFT MANUFACTURERS 


The following is the responses from Rotary-Wing Manufacturers to a set of 
questions. 

1. DEFINITION OF CRASH RESISTANT FUEL SYSTEM (CRFS) COMPONENTS 

The components of a CRFS consist primarily of valves, fittings, hoses 
and tanks. 

2. NUMBER AND LOCATION, SIZE OF COMPONENTS, FLOW REQUIREMENTS 

The number and location of CRFS components depends on design 
configurations. The sketch below illustrates the initial CRFS 
developed for the U. S. Army. Subsequent CRFS designs are more 
simplified, lighter and more efficient. 



It was suggested that breakaway valves should not be placed in engine 
feedlines or in vent lines. 
















3. RELIABILITY OF COMPONENTS 


Two instances were found in which self-sealing valves failed. Both 
occurred on the ground prior to flight and were attributed to the 
manufacture of the valve. Qualification tests weren't defined but, 
would be the same insofar as vibration, shock, temperature, and 
fatigue that all components require. 

4. MAINTAINABILITY 

No particular problems. 

5. DESIGN REQUIREMENTS 

Bell doesn't determine crash loads. They follow the U.S. Army 
survival design guide with regard to designing frangible fittings for 
a percent of local structural load or hose pull-out strength. It is 
important that the structure, where breakaway components are used, be 
stronger than the components. 

6. USE OF AUTOMATIC SHUT-OFF VALVES? 

Not used for two reasons. First, they do not want inadvertent 
closure and, thus, present a potential reliability problem. Second, 
they do not feel reponse time can be fast enough to prevent 
significant fuel spillage. 

7. USE OF FLAME ARRESTORS? 

Not used. 

8. WEIGHT/COST FIGURES 

Provided some data. A typical tank construction is as shown below: 

PLYS (STRENGTH) 

I 



(FABRIC COATED INYLONI 
WITH RUBBER! 
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One figure given was 0.14 lb/gallon for a crash-resistant bladder 
(with fittings) above and beyond a noncrash-resistant bladder. 

Tabulated data from a commercial helicopter program indicated that in 
going from a standard noncrash-resistant bladder to a crash-resistant 
bladder of 13 oz fabric would increase weight approximately 0.16 
lb/ft^* A 26 oz fabric would increase the weight by 0.26 to 0.28 
lb/ft or about 3.3 times a standard noncrash-resistant bladder. 

9. NEED FOR STRUCTURAL MODIFICATIONS TO ACCOMMODATE A CRFS 

Generally there should be no need for structural modifications to 
accommodate the use of a CRFS. As noted earlier, it is important 
that the strength of the structure where frangible fittings, or 
breakaway valves are used, be higher than the component strength. 
Also, it was pointed out that the design for potential failure modes 
of structure should be considered such that direct impact into a fuel 
tank is precluded when structure fails. 

10. ANY DETRIMENTAL EXPERIENCE WITH THE USE OF FLEXIBLE HOSES, 
PARTICULARLY IN A 'HOT ENVIRONMENT' 

Tne transport manufacturers expressed concern that flexible hoses are 
more prone to burning than steel tubes. The helicopter manufacturers 
indicated that metal tubes are used only in drain systems. They do 
not appear to be concerned about possible burn-through of the hose. 
The hoses are used primarily where motion is anticipated. Data from 
Aeroquip indicate that hose elongation between 34 percent and 66 
percent is achievable. 

11. HOW MUCH TIME IS GAINED VIA THE USE OF A CRFS? 

No definitive answer could be given. It was estimated that perhaps 
up to 2 minutes additional egress time is achieved. The idea is to 
prevent a massive spill. 

12. IS THERE A NEED FOR A CRASH-RESISTANT TANK CELL MATERIAL IF THE FUEL 
TANK IS IMBEDDED IN STRUCTURE A SIGNIFICANT DISTANCE AWAY FROM THE 
IMPACT REGION? HOW MUCH IS SIGNIFICANT? 

The reason this question was posed was because in transport airplanes 
the fuselage auxiliary tanks are located between the cargo and 
passenger floors, which can be as much as 20 inches above the ground 
impact point. The helicopter manufacturer response is that the 
danger posed to the fuel tank is more due to distorted structure 
penetration than from ground obstacles. Consequently, the tanks are 
designed with a glass bag surface surrounding it. Aluminum is never 
used to encase the fuel tank. Also, the helicopter designs tend to 
have the fuselage fuel cell sit inside the structural envelope with 
no direct structural attachment except for fittings such as probes, 
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strainers, and drains. The distortion of these components can cause 
tears in the tank cell material. 

13. WHAT EXPERIENCE IS THERE WITH WING-MOUNTED FUSELAGE FUEL TANKS? 

Bell has the XV-15 tilt rotor which has fuel cells contained in the 
stub wings. There is no accident experience with this aircraft. 

For a current commercial design, the wing-mounted cells are 
crash-resistant, utilizing an 8 oz fabric which weighs approximately 
0.22 lbs/ft . The fuselage ta^ks for this aircraft use a 13 oz. 
fabric which weighs 0.27 lb/ft . 

14. IDENTIFY GUIDELINES NOTED IN THE U. S. ARMY CRASH SURVIVAL DESIGN 
GUIDE WHICH ARE STRICTLY ADHERED TO 

For the most part, the helicopter manufacturers follow the U.S. Army 
Crash Survival Design Guide. Volume V (USARTL-TR-79-22E) contains a 
comprehensive chapter on "post-crash fire protection", which 
describes and illustrates various design features for the tanks, 
lines and components. 

15. DOES THE ACCIDENT EXPERIENCE IDENTIFY THE RELATIVE CONTRIBUTION TO 
FIRE FATALITIES OF THE VARIOUS PORTIONS OF A CRFS? 

No. The idea is to prevent a massive release of fuel. In this 
sense, penetration of the tank might be more likely to release large 
quantities of fuel. However, if components distort and cause tear of 
tanks then they can be the culprit in a particular accident. 
Crash-resistance is a systems approach that includes the tanks, lines 
and components. Also important is attention to details. It was 
pointed out that relatiavely simple design detail for the drain sumps 
involving a contoured surface where exposure to ground can occur, 
could prevent a potential tear-out problem. 

lb. ARE COMMERCIAL REQUIREMENTS DIFFERENT THAN THE MILITARY REQUIREMENTS? 
CAN THESE DIFFERENCES BE IDENTIFIED? 

The military requirements are very comprehensive and mandate the use 
of a CRFS. The commercial requirements are virtually non-existent in 
this area. There is movement, however, in the direction of 
requirements lor CRFS for commercial rotorcraft. The CAA has invited 
comments from the manufacturers regarding future requirements for 
"crashworthy fuel systems for rotorcraft". The helicopter industry 
is of the opinion that the CRFS requirements for commercial 
rotorcraft should be less stringent than for the military rotorcraft. 
Some examples are illustrated in the table 6-8 comparison. The 
Gone r a 1 Aviation Safety Panel (GASP) committee is reviewing this 
subjet lor the FAR23 category aircraft, but no significant progress 
toward incorporating a CRFS has evolved as of now. 
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TABLE 6-8. CRFS FUEL CELL MATERIAL COMPARISON 


STANDARD 


Drop Height with 
No Spillage (ft) 

Constant Rate 
Tear (ft-lb) 

Tensile Strength 
(lb) 


impart Penetration 
(5 lb Chisel) 

Drop Height (ft) 

Paraliel/Warp 

46" Warp 

Screw Driver (lb) 

Material Weight 
(lb/ft*-) 

Weight Increase 
Factor 


* Also dropped from 66 ft with no spillage 

** 350% elongation 


SAFETY CELL 
US-770 

SAFETY CELL 
US-756 

FPT** 

FPT/ 

CR.615 

50 

(807. Full) 

50* 

(80% Full) 

65 

(Full) 

400 

210.0 

42 

168 

1717 

NA 

158 

1128 

NA 

1.2 

8.5 

10.5 

| 

8.5 


303-446 

370.5 

NA 

. 36 

.40 

.55 

3. Ox 

3. 3x 

4.6x 


US-751 




















6.5 GENERAL AVIATION SAFETY PANEL (GASP II) RECOMMENDATIONS 

The General Aviation Safety Panel (GASP I) made recommendations in the 
area of energy absorbent seats and restraint systems for small, general 
aviation airplanes. The GASP II effort is directed toward post-crash fires in 
small, general aviation airplanes. The studies conducted by the National 
Transportation Safety Board (NTSB) and the Federal Aviation Administration 
(FAA) suggest that the nature of fire damage is such that it is difficult, if 
not impossible to determine where the fire started, how it progressed or 
whether the fatality could have been prevented solely by treating either the 
fuel tanks, fuel lines or fittings. The GASP II committee consensus is that 
the complete transference of fuel-system technology from rotocraft (or even 
racing cars) to small general aviation airplanes is highly unlikely for the 
following reasons; 

• rotocraft fuel tanks tend to be box-like, since they do not need to be 
confined within relatively thin wires 

• racing cars have tankage requirements that differ substantially in 
capacity and shape 

The GASP II preliminary draft position goes on to state the following: 

"Since the current technology of fire-resistant fuel systems may not be 
applicable, it is unrealistically simplistic to expect that small, general 
aviation airplanes can be manufactured economically with no likelihood of 
spilling fuel in a survivable accident. Specifically, the GASP found the 
state-of-the-art in fuel tank design to be inappropriate with respect to 
weight and capacity because of the surface/volurae relationship of fuel tanks 
needed for typical general aviation airplanes. 
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A fuel tank system that would have the potential for no fuel spillage in 
a typical survivable accident would be too heavy and suffer too great a 
reduction in fuel volume to be practical. Analysis by the FAA indicates that 
for a full range of bladder material thicknesses from 0.030 to 0.108 inches, 
the weight penalty would be in the range of 0.26 to 0.62 pounds per gallon, 
and the reduction in fuel volume would be in the range of 8 percent to 14 
percent, with many general aviation airplanes experiencing the higher losses 
in fuel volume. Members of the GASP have also conducted similar studies 
related to weight and volume, and they support the FAA's findings. 

Furthermore, preliminary analysis indicates that equipping small, general 
aviation airplane with fuel tanks that would be unlikely to spill fuel during 
a survivable accident would decrease their operational envelope, and that 
in-flight hours must be increased in order to achieve the same operational 
capability as current airplanes without special crash-resistant fuel tanks." 

The preliminary draft position goes on to state that unless compromises 
related to weight and fuel volume are made, the likelihood of fuel being 
spilled in a survivable accident remains high for any small, general aviation 
airplane. 

"While existing data fail to identify precisely what advantages would 
accrue trora specific treatments of the fuel system in a small, general 
aviation airplane, the GASP presumes that benefits will result from reducing 
tne likelihood of considerable fuel spillage in areas where there is an 
obvious and high probability of ignition (such as forward of the engine 
firewall) and in areas where the possibility of considerable fuel being 
spilled and ignited would be sufficiently high to reduce significantly the 
time available for extrication from the airplane (such as at the juncture of 
file wing and fuselage) in a survivable accident. 

The purpose of treating a fuel system to prevent considerable spillage of 
fuel in a survivable accident is to delay the onset of rapid propagation of 
post-crash fire in order to increase the length of time available for the 













pilot(s) and passenger(s) to remove themselves from the crashed airplane. 

These treatments and design changes may not in all cases prevent a post-crash 
fire. The Panel assumes that increasing the time available for extrication 
will be a contribution to safety, particularly if GASP 1 requirements for 
seats and restraint systems (t’hich enhance the likelihood that an occupant in 
a survivable accident will be conscious and ambulatory) are applied. 

Also, obvious sources of ignition, such as electrical lines that have 
sufficient voltage to create a spark if improperly grounded, should be 
separated from fuel lines in those areas where a fuel line rupture is likely 
in a survivable accidcent. 

The means for increasing the time available for extrication in a 
survivable accident by preventing large quantities of fuel spillage near 
obvious ignition sourcees and near the pilot/passenger volume, needs to be 
considered for each design individually. It is not practical to develop a 
universal specification for the design of fire-resistant fuel systems that 
would be applicable to all aircraft." 

The GASP committee further feels that the FAA should encourage aircraft 
and equipment manufacturers to investigate additional means to reduce fuel 
spillage from integral tanks and fuel tanks in general, provided such means do 
not detract from the overall performance and safety of aircraft because of the 
heaviness or impractical nature of their design. 


GASP II Preliminary recommendations are as follows: 


I. The General Aviation Safety Panel recommends that the Federal Aviation 
Administration require all small, general aviation airplanes capable of 
carrying fewer than 10 passengers and having an application date for a new 
type certificate after December 31, 1988 (assuming that appropriate amendments 
to the Federal Air Regulations can be enacted by that date) be designed so 
that no more than 8.0 ounces of fuel spillage will occur in the junctures and 
area denoted in paragraphs 1(a) through 1(d) below when the airplane 







experiences a survlvable accident with velocity changes at least equal to the 
GASP I proposal. 

1(a). The wing/fuselage juncture 

1(b). The firewall/engine-mount juncture 

1(c). The juncture between tip tanks and wings 

1(d). The dry-bay area behind an engine if used to carry fuel 

II. The GASP recommends that any fuel tank located in an engine nacelle or 
any fuselage tank located between the engine and an area occupied by either 
pilots or passengers, or any fuel tank external to the wing's external contour 
(but not including tip tanks) should comply with the requirements of 
MIL-T-27422B, Type II, Class A with the following exceptions from 
MIL-T-27422B: 

11(a). Constant tear rate - the minimum energy for complete 
separation shall be 200 foot pounds 
11(b). Impact penetration - drop height of a five-pound chisel shall 
be 8.0 feet 

11(c). Impact tear - drop height of a five-pound chisel shall be 8.0 
feet and the average tear shall not exceed 1.0 inches 
11(d). Crash impact Phase I - delete 

11(e). Crash impact test of full size production test cell - the 

cell with all openings suitably closed shall be filled to 80 
percent of normal capacity with water and the air removed. 

The cell shall be placed upon a platform and dropped from a 
height of 50 feet without leakage. 


III. The GASP II committee recommends that the Federal Aviation Administration 
prepare an Advisory Circular that identifies recommended and acceptable means 
Cor compliance with any new regulations pertaining to fire-resistant fuel 
systems. 


The GASP II preliminary draft recommendations upon review of the 
committee could change. Final recommendations are not due until 1988. 
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The review of the literature, accidents, design analysis, and test data 
suggests that there are many approaches that can be considered to help reduce 
the potential of post-crash fire. Ten concepts have been included in the 
initial assessment, two of which have previously been recommended by the SAFER 
Committee. Some of the concepts may be multifaceted. For example, wing 
structural modification may involve more than one approach. Six factors; 
weight, volume reduction, maintenance, effectiveness, reliability and cost are 
considered. The rating is subjective and each concept is considered 
independent of the other concepts. A rating of 1 through 3 is used for each 
factor. The most favorable rating is 1 and the most unfavorable rating is 3. 
It is realistic to consider that this rating system is on a relative basis. 

The priority rating/ranking assessment is shown in table 6-9. For the most 
part, a particular change in design or approach by itself may not drastically 
reduce the fire hazard potential. By the same token, extended effort to 
improve a factor (i.e., reliability) may drive up another factor (i.e., cost). 

Although it is not listed in the priority ranking, the design practice of 
paying close attention to details such as line routing, avoidance of 
protuberances, proper tank location, etc., where choices are available, is an 
important consideration. Obviously, there would be very little penalty 
associated with adherence to this philosophy. However, no recent accident 
suggests that lack of adherence to detail design consideration is attributable 
to a fire fatality. (Ruptured fuel lines were identified for the B-727, Salt 
Lake City, Utah accident on 11-11-65. This accident resulted in changes in 
line routing.) 

Two SAFER committee recommendations; vent flame arrestors and emergency 
shutoff valves are discussed briefly. They are not included in the list of 
concepts because they have been previously recommended and ANPRM's have been 
issued for each. 






















































Vent flame arrestor - 


This approach, like detail design considerations, is relatively simple to 
implement and one which would have no apparent significant adverse 
penalties. The SAFER Committee Report, which recommended the 
incorporation of this feature, identifies lwo accidents in which vent 
flame arrestors had the potential to reduce fatalities. An Advanced 
Notice of Proposal Rule Making (ANPRM) has been issued on this change but 
as of April, 1986, no action has been taken. 

Emergency shut-off valves - 

The SAFER report, which recommends the use of emergency shut-off valves, 
notes two accidents in which improved fuel cut-off was deemed to have the 
potential to reduce fire-related fatalities. Since post- impact fuel 
spillage occurs often in accidents, any measures to reduce flow 
immediately after impact would be beneficial. Weight, volume, and cost 
would appear to be minimal penalties. The major concern is for 
reliability and maintenance to ensure that no inadvertent shut-off of 
fuel occurs during normal operation, particularly if automatic shut-off 
controls are contemplated. Manual shut-off valves for wing pod mounted 
engines are in use in current transport airplanes. The use of shut-off 
valves, to prevent wing cross-over fuel feed, could provide the benefit 
of assuring the availability of exits on one side during some fuel spill 
accidents. An ANPRM has also been issued on this change and no action 
has been taken as of April, 1986. 


The following is a description of the rationale for the respective 
rankings for each of the other concepts. 


Crash resistant fuel system (CRFS) components - 

Fuel line rupture is a major contribution to post-crash fire. The 
requirement to provide displacement capability in vulnerable areas is 
stated in U.S. Array recommendations and existing FARs. Flexible 
hoses are used in selected areas of transport airplanes such as 
between the airframe (wing) and engine, and in the transition from 
pressurized to non-pressurized fuselage areas. This change could be 
further implemented in vulnerable areas and in conjunction with the 
concept of self-sealing break-away fittings. Added weight, volume, 
and cost should be nominal. The degree of effectiveness of this 
change depends to some extent on the implementation of other changes 
since accident data do not classify this as a design defect. 
Maintaining flexible hoses could present a problem as deterioration 
could lead to contamination. 


The U.S. Army Crash Survival Design Guide suggests the use of self 
sealing break-away fittings/attachments wherein failures can be 














anticipated. The fitting and attachments would not be expected to 
add very much weight or cost, nor would they significantly reduce 
fuel volume. The major problems associated with these components 
would be assuring that inadvertent disconnects to disrupt required 
fuel flow do not occur. The accident data indicate fuel line rupture 
occurrence as a significant contributing factor in fire-related 
accidents. 


Structural deformation in the fuel tank areas can result in tensile 
failures of plumbing conveying fuel to or from the fuel tanks. The 
use of self-sealing break-away valves, whose purpose it is to act as 
a "safety fuse" by separating and sealing under crash loads, has been 
successfully used in some helicopter installations to prevent rupture 
of the tank, hoses or fittings. The break-away valve has an integral 
poppet valve which is closed by the parting action of the fitting 
body preventing the discharge of fuel. Typically, the break-away 
valves are designed to assure that separation will occur at loads, 
whether tension, shear, compression, or combinations thereof which 
have been determined, by analyzing the aircraft for probable impact 
force and direction and by determining the resulting structural 
deformation around the valve. Examples of separation loads for which 
break-away valves intended for use in helicopters are designed and 
tested are shown in figure 6-4. 
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ure 6-4. Example Breakaway Valve Weights and Separation Tension 
Loads and Bending Moments were Obtained from Test Data 
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Included in the illustration are the weights of the units tested. In 
addition, the break-away valves are tested to qualify them for use in 
specified environments. Break-away valves have not met with approval 
in civil aviation out of concern that a failure of the poppet in 
flight caused by fatigue stress or some other causes exclusive of a 
plumbing line break, could present a hazard due to unavailability of 
fuel. In evaluating the feasibility of using these types of fittings 
for transport type aircraft, the fatigue life as well as the strength 
and operational characteristics will have to be adequately 
demonstrated. 

2. Crash Resistant Fuel Tank (CRFT) in fuselage - 

The U.S. Army experience in the use of crash-resistant bladder fuel 
cells has been noteworthy for the significant reduction in post-crash 
fire fatalities for military helicopters. A CRFT is expected only to 
delay the sudden massive fire (e.g., fireball) long enough to allow 
the occupants to escape. In the U.S. Army applications, fuel in the 
fuselage is the primary storage location. For transport airplanes, 
this is a special case where fuel is added because the wing capacity 
is not adequate for the range requirements. This system is not an 
alternate to fuel storage in the wings. The use of military type 
crash-resistant fuel cell material will impose a substantial penalty 
in weight (8.7 x a standard bladder). Cell materials, proposed for 
civil rotorcraft with a reduced capability, would still impose a 
weight penalty about 3 to 4-1/2 times a standard bladder. In the 
fuselage, a crash-resistant tank would not be as effective as in the 
wing due to: l) the nature of the crash environment, and 2) fuselage 
tanks can be located above crush zones and away from major structural 
breaks. Bladder tanks can deteriorate and contaminate fuel, thus, 
there is a degree of concern about maintenance and reliability. 
Several contemporary fuselage fuel tank configurations are discussed 
in Section 5, with regard to crash-resistant features, as well as 
potential improvements. 

3. Spanwise compartmentation of wing tanks - 

To some degree current designs already have compartmentized fuel 
tanks by virtue of the fact that there are several fuel bays in each 
wing. This concept would add additional fuel bays along the span 
and, with the incorporation of frangible fitti 1 '. a, isolate fuel 
spillage and reduce the fire hazard. It is anticipated that this 
type of change would add moderate weight, volume and cost penalties. 
Complications associated with this change, if any, would be with the 
addition of extra fittings, plumbing, controls and fuel management 
procedures. 
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Wing root structural modifications - 

Failure at the wing root is noted to occur in many accidents. The 
most likely cause of this type of failure is a high distributed load 
which, in turn, produces a large fore-aft or up-down bending moment. 
This change is oriented toward the problem of wing separation. The 
reliability of instituting a structural change such as double walls 
would require test verification. This change would also require 
self-sealing break-away fittings to be effective. It would not be 
effective for concentrated load impacts. 

Wing span structural modifications - 

Among the design concepts to be considered, are wing leading edge 
reinforcement, front spar protection and forward skin panel changes. 
Since wing penetration by obstacles such as trees and poles is a 
frequent contribution to fuel spillage, a design change, which could 
minimize this effect, could be significant. However, the design 
development data suggests improvements with weight penalties of 3 
percent to 5.4 percent of the wing dry weight, loss of fuel volume 
from 7 percent to 15 percent, and loss in range of 7.6 percent. The 
maximum impact velocity for these tests was 130 ft/sec. Accident 
data (Reference l) show that in accidents wherein fuselage breaks 
occur the ratio of fatalities to onboard occupants as related to 
forward velocity is as shown below: 

Average Velocity Fatality Ratio 


Ft/Sec 

Percent 

96 

6.3 

140 

29.4 

230 

77.9 


The L-1649 and DC-7 full-scale crash test data (references 13 and 14) 
suggest that current wing designs would most likely fail catastroph¬ 
ically if penetrated by trees and/or poles with the airplane moving 
at a velocity of between 198 ft/sec and 235 ft/sec. Thus, improve¬ 
ments in this area, at best, would be a partial reduction in 
penetration. 

Several design concepts, which were presented in reference 10 were 
reviewed during this study and discussed in Section 5. It was 
concluded that forward skin panel design for improved impact 
resistance, front spar protection for pole/tree impact, and leading 
edge protection design for pole/tree impact, were viable. However, 
additional effort is needed to assure that these potential changes 
are adequate in the appropriate impact velocity range and do not 
impose complications with regard to maintenance as a result of the 
manner and/or location of installation. 
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High strength integral tanks - 

Lack of tank strength is not a major reason for fuel spillage. On 
the contrary, the ability of a tank and the components to distort and 
flex under crash loading conditions, particularly penetration loads, 
may be more significant than strength. Reference 24 data show that 
both integral and bladder type cells could contain fuel under 
controlled deceleration which would exceed the human survival 
envelope. Increased strength will add weight and cost, yet, not 
significantly reduce spillage. Current tanks are capable of taking a 
relatively high inertia loading. 

Internal liners - 

To be crash resistant internal liners would require additional 
weight, although the volume and cost penalties may not be high. A 
major concern would be in the reliability and maintenance areas where 
retention must be assured. Replacement may have to be periodic. To 
prevent contamination, material would have to be compatible with the 
f uel. 

Tank explosion suppression - 

The SAFER study indicated that explosion suppression systems are used 
in some fuel tank applications where the tank geometry is relatively 
simple and direct communication to a detector element is simple. The 
installation can be very complex for multi-celled fuel tanks. This 
method will be ineffective in accidents where extensive fuel tank 
rupture occurs and where the major hazard is the external pool of 
burning fuel. This approach provides some degree of protection when 
minor damage occurs. In these circumstances of minor damage, simple 
flame arrestors installed in the fuel tank vent line to preclude 
propagation of flame down the vent and by systems which assure that 
engine fuel is shut off in fire emergencies, provide equivalent 
protection with less penalties. 

CRFT in wing - 

The major advantage of a crash-resistant fuel tank in a wing is the 
reduction of the adverse fuel spillage effects from a concentrated 
load. The significant negative factors are the weight, volume, and 
maintenance factors. The shape oi a wing makes the installation of a 
CRT very complex and costly. In addition, bladder tanks require 
periodic servicing to avoid contamination. 

One study (reference 24) shows that the replacement of an existing 
bladder, with a crash-resistant tank, for a transport airplane, could 
result in a 7.6 percent range loss and a 7 percent fuel volume loss. 
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Since the replacement was already bladder type, the volume loss could 
be higher for replacement of integral tanks. Another study, 

Reference 12, in which bladder cells were installed in a DC-7 wing 
showed volume loss of 15% and a 46 pound (5.7%) weight penalty (based 
on 120 gallon tank) for a pole impact condition at a velocity of 110 
ft/sec. Reference 14 describes a test in which the wing No. 3 main 
tank that was composed of both an integral and crash resistant 
bladder type was totally destroyed by a pole impact, at an impact 
velocity of 235 ft/sec. 

10. Foams/foils - 

The SAFER committee states that the installation of heat reticulated 
foam or expanded metal foil have the advantage of being passive 
systems. They prevent excessive overpressures from developing and 
eventually completely extinguish tank fires. Foams are used in 
military applications where projectile penetration is a threat. 
However, a published article (reference 54) indicates that fuel tank 
foam fires have been a problem during the period 1978-84. The foams, 
in use at the time, were not to be used with commercial fuels (Jet A) 
because the non-additive fuel is more prone to generating an 
electrostatic charge on the foam during refueling. Some major 
concerns are extreme weight, volume reduction, impaired normal 
maintenance activities, and bacterial growth (contamination). Metal 
foils have an advantage of a significantly higher melting point (1100 
degrees F versus 360 degrees F for foams). However, since they are 
semi-rigid, they present complex structural design problems in order 
to permit access to fuel tank components for service and maintenance. 

6.7 GENERAL APPROACHES 

From the review of the state-of-the-art technology and the priority 
ratings several general approaches appear to warrant further consideration. 
These approaches are categorized as follows: 

1. Component improvements - low penalty, minimal improvement 

2. Wing Fuel Containment via wing structural modifications - high 
penalty, moderate improvement 

3. Fuselage Fuel Containment - moderate penalty, moderate improvement 





























Approach No. 1 identifies several component related design considera¬ 
tions. Some of the concepts noted are partially in use in current transport 
aircraft design. These improvements are applicable to both wing and fuselage 
fuel containment. Individually, these items have projected low weight, volume 
and cost penalties. Maintainability, reliability and effectiveness factors 
are considered to be moderate. If hardware currently in use by helicopter 
manufacturers is easily transferable, then the concerns for maintainability 
and reliability could be reduced. If transport airplane performance criteria 
requires additional research and development in some areas (e.g., deformation 
versus acceleration valve actuation), then implementation could be longer 
range. 

• Crash-Resistant Fuel System Components 

Flexible Lines - Transport category airplanes design for the use of flexible 
lines in locations where there is a high stretch ootential and are required to 
use hoses where relative displacement is anticipated. Flexible lines may be 
more prone to leakage and less fire retardent than steel tubing. In a current 
wide body transport airplane, flexible hoses are used in locations shown in 
Figure 6-5. The rotary-wing aircraft manufacturers do not indicate any 
deleterious affects with regard to maintainability and reliability. For 
transport designs an assessment should be made of possible additional 
locations for use of flexible hoses. 

Self-Sealing Breakaway Fittings Valves - This design feature is heavily 
favored by the rotary-wing aircraft manufacturers and is in use in some FAR25 
category aircraft. For transport airplane configurations, in which it is not 
currently used, it will be necessary to identify locations where the 
installation of components could prove beneficial. Of interest will be the 
size and design requirements at specific locations. A preliminary assessment 
of potential usage of such components for a current widebody jet aircraft, 










■ t't HOSES THRU CABIN FLOOR ROUTED IN ORAINEO AND VENTED SHROUD. PROVIDES 50%STRETCH DURING CABIN BREAK UP. HOSES 
USED TO FACILITATE INSTALLATION AND REMOVAL 

( 2 ) HOSES EMPLOYED WHERE RELATIVE DISPLACEMENT IS POSSIBLE 

(’ST) HOSE USED ACROSS FUSELAGE DISCONTINUITY (AT REAR WING SPARI WHERE FUSELAGE FAILURE IN CRASH IS PREDICTABLE. 
HAS 50% STRETCH CAPABILITY 

4) HOSE SECTION (INTEGRAL WITH LONG TUBE USED TO ELIMINATE JOINTS) PROVIDES FLEXIBILITY AND FACILITATES 
INSTALLATION AND REMOVAL 

Figure 6-5. Use of Flexible Hose in Current Widebody Transport Airplane 


which doesn't include these items, is shown in figure 6-6. The wing engine 
fuel line breakaway fittings, which is a design requirement in the event the 
pylon departs the wing, could be candidates for the self-sealing feature. 
Rotary-wing aircraft experience with regard to reliability and maintainability 
should be a valuable input. 
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Figure 6-6. Potential Application of Breakaway Fitting in a Current 
Widebody Transport Airplane 

• SAFER Committee Recommendations 


Vent Flame Arrestors - Flame arrestors are currently in use by the transport 
airplane manufacturers. If a fire can propagate into a fuel tank and the use 
of a flame arrestor can slow down or preclude the propagation of the fire up 
through the vent line, it is a desirable feature. Typically flame arrestors 
should be installed in ventilation and drain lines where there is a possibil¬ 
ity of flame spreading from the outside of the airplane or from one compart¬ 
ment to another. 
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Emergency Shut-Off Valves - Tank shut-off or isolation valves are used at 
selective locations within the aircraft. For example, current widebody jet 
aircraft have tank isolation valves at the locations similar to those shown in 
Figure 6-7 at the point where the fuel lines leave the fuel tank. These 
valves are manually controlled by the crew members. The wing engine tank 
isolation valves would be candidates for automatic shut-off valves provided 
the sensing mode (force, acceleration, deflection) were reliable, otherwise, 
inadvertent closures could be catastrophic. Automatic shut-off valves are not 
used in rotary-wing aircraft for the same reason they are not used in 
transport airplanes; concern for inadvertent closure. 

Approach No. 2 - Ming Fuel Containment via Structural Modification s 

Approach No. 2 defines a number of wing design changes which most likely 
will be long term as far as implementation is concerned. Each of the changes 



Figure 6-7. Typical Location of Tank Isolation Shut-Off Valves in a Current 
Widebody Transport Airplane 


6-A3 













IWUUUUMV 




A' 


will have to be proved with regard to cost and feasibility. The latter point 
will require extensive testing, and could involve moderate to large size 
structural changes before implementation. The anticipated effectiveness, as a 
result of incorporating these changes individually, is considered moderate in 
that each will be desirable for a particular failure mode (e.g., obstacle 
penetration, distributed load). The penalties associated with each of these 
changes vary from "low" to "moderate." 
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The following is a description of various approaches discussed earlier. 


1. 


Spanwise Compartmentation of Wing Tanks - Current transport airplane 
design contain, to a limited degree, spanwise compartmentization of 
wing fuel tanks. Figure 6-8 shows a widebody design in which 
each wing contains two distinct integral fuel tanks. The spanwise 
concept would further compartmentize the fuel cells. The crossover 
fuel lines from each cell would require self-sealing fittings to shut 
off fuel flow from one cell to another in the event of a penetration. 
In so doing, the loss of fuel would be reduced since each impact zone 
will have less fuel to spill. If the break were to occur at a 
location between the wing root and inboard engine, which is a likely 
location based on accident data, then fuel flow closure would still 
be needed with self-sealing fittings. Fuel flow management and the 
complexity of the system could be increased with the extra 
compartments. It is surmised that before any R&D hardware is 
developed for this concept computerized analyses of the operational 
aspects (e.g., flow pressure, volume, cross-feed, valve closures) 
would be required. 


Forward or Lower Skin Panel - Corrugated skin panel and sandwich 
panel designs (Concepts (b) and (c), figure 5-3) are considered to 
have potential advantages since weight, volume loss and cost are not 
viewed significant negative factors. However, complexity of design 
and manufacturing as well as maintenance and inspection procedures 
are major concerns. Concepts utilizing honeycomb material are not 
considered appropriate for an integral wing fuel tank in commercial 
application because such material is prone to leakage, difficult to 
maintain and susceptible to lightning. These concepts have the 
potential to improve impact resistance by providing increased bending 
strength and/or protection from impact of the forward upper skin. 
These changes may be of limited benefit in many of the conditions 
which are encountered in survivable accidents. 
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Figure 6-8. Spanwise Wing Fuel Tank Compartmentation 


Leading Edge Protection - Figure 5-3 depicts two designs for 
protection against pole and tree impact. Both design concepts have 
many negative aspects, particularly the need to provide functionally 
practical designs which do not interfere with operational systems. 

The concepts also indicate a need to provide strengthened back-up 
structure to distribute loads. Of the two designs, Concept (b) is a 
more likely candidate. To protect the leading edge the strengthened 
sect ion would have to withstand impact from objects (tree, pole) with 
the airplane moving forward at speeds up to 250 ft/sec. It is 
unlikely that at such a high velocity that penetration of fuel tanks 
and subsequent fuel spilLage could be avoided. 










4. Front Spar Protection - The proposed concepts shown in figure 5-4 
have many negative aspects, particularly with regard to complexity of 
design fabrication and maintenance. The concepts, while likely to 
achieve limited protection against penetration, could be more 
hazardous during ground slide-out due to potential for lower skin 
collapse. Two front spar design concepts, shown in figure 5-2, 
provide protection from inertial fuel pressure. However, current 
designs are adequate for this loading condition. 

5. Structural Modification at Wing Root - Structural failure at the wing 
root, as a result of ohstacle penetration, has been noted in many 
accidents. However, in general, the failure is usually not a clean 
break nor does it occur at an exact location such as the wing/ 
fuselage intersection. The dichotomy of this concept is that the 
root is designed as the point of maximum bending for gust loads 
(flight) and yet for crash loads this will have to represent a weak 
link. The design to accomplish this feat (perhaps with fore-aft 
shear bolts) would have to recognize that a) failure cannot occur 
during normal operations, or mild impact conditions, b) crash loads 
tend to be high g, short time duration pulses, and c) obstacle 
penetrations can occur anywhere along the wing span. In addition, 
once a break occurs, component fittings with self-sealing capability 
are needed. 

6. Energy Absorbing Devices - One of the several concepts shown in 
figure 5-6, Concept (c), appears acceptable structurally, provided 
the bay remains dry. In general, only a small amount of energy will 
be absorbed and penetration of cells could take place. This approach 
probably falls into the category of leading edge protection, front 
spar protection and forward skin panel in that limited protection may 
be achieved but that additional measures may be necessary to limit 
the amount of fuel spillage. 

Approach No. 3 - Fuselage Fuel Containment 

Approach No. 3 specifies the use of a crash-resistant fuel tank in the 
fuselage. As noted in Section 5, there are several concepts currently 
employed in the use of fuselage-mounted fuel tanks. This change will cover 
the use of crash-resistant materials as well as concepts. Once again, the 
feasibility of the use of crash-resistant materials in transport airplane 
depends heavily on current military experience. The most concern is for 
weight and volume penalties, depending on the degree of crash-resistance 
needed or desired. This change is a short-term implementation if readily 
acceptable materials are available, otherwise, it could be longer term. 
















Crash-Resistant Fuel Tank Material - The U.S. Army military rotary-wing 
experience with crash-resistant fuel systems (CRFS), which includes tank 
material, as well as related components (self-sealing valves, breakaway 
fittings, flexible lines) has proven tremendously successful in reducing fire 
related fatalities. The CRFS for rotary-wing applications appears to be 
almost exclusively for fuselage-mounted fuel tanks. The U.S. Array, in decid¬ 
ing on the use of crash-resistant tanks, had a clear cut need to drastically 
reduce the lethal effects of post-crash fires based on accident experience. 
Commercial aircraft accident experience has not shown failure of fuselage- 
mounted tanks, in limited use, to be a major contribution to injury/fatalitv, 
albeit the use of auxiliary tanks in the fuselage is accelerating in current 
designs. The U.S. Army, in deciding to implement the use of crash-resistant 
fuel tanks, was willing as the customer to dictate priorities and accept 
weight penalties. These penalties, as noted earlier, can be substantial. 
Table 6-8, obtained from reference 56, shows a comparison of CRFS fuel cell 
material for standard bladders, that are recommended for civil helicopters 
(enclosed area) and the corresponding military requirements. The table shews 
the wide range of fuel cell bladder material available and used today. The 
reference report goes on to state, "The importance of realistic requirements 
is shown in the weight increase row of table 1 (table 6-8). Note that the 
fuel cell bladder material for the civil helicopter criteria is about 3.5 
times heavier than today's standard which is considerably below the 
unrealistic military weight increase of 8.7 times heavier. Going from civil 
CRFS criteria to military CRFS only increases weight with little or no 
increase in post crash fire protection for survivable civil helicopter 
accidents." The reference report further states, "In addition to the criteri 
of table l (table 6-8), a CRFS should tolerate, without significant spillage, 
the relative motion between fuel system components during structural 
deformation anticipated in a crash environment. This means that stretchable 
hoses, extra length hoses, self-sealing breakaway valves, and frangible fuel 
cell attachments to structure may be needed to allow the CRFS components to 
move with the structural deformation and still contain the fuel." 























SECTION 7 

BENEFIT AND PENALTY ANALYSES 

7. 1 BENEFIT ANALYSIS 

7. 1. 1 Wing Fuel Containment 

The basis for establishing the potential benefit from incorporating fuel 
containment concepts into future transport airplanes is derived from an 
extrapolation of accident data presented by the three major domestic airframe 
manufacturers under contracts sponsored by the FAA and NASA (references 1-3). 
The studies included accidents that occurred between 1959 and 1978. More 
recent accidents could alter the conclusions somewhat but are not included 
because no comprehensive pertinent summary is available. The studies reported 
on in references 1-3 covered a combined total of 176 accidents as was depicted 
in figure 3-1. Table 7-1 shows a comparison of the number of accidents, 
onboard occupants and fatality distribution for each. The distribution 
between fire and trauma fatalities is different in the three studies due to 
the mix of accidents that were included in the individual studies. Of 
interest is that the percentage of fire fatalities to the total number of 
fatalities is approximately a third (28.6 percent to 36.5 percent) for all 
three studies. There are a lot of "unknowns,” particularly for the reference 
1 study. 

TABLE 7-1. COMPARISON OF ACCIDENT STUDY DATA 
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The reference 1 study is by far the most comprehensive with regard to 
;ire fatalities and, thus, will form the basis for much of the benefit 
analysis. Table 7-2, obtained from reference 1, categorizes accidents by 
scenario. Accident severity categories are defined as shown in table 7-3. 
Several crash scenarios are eliminated namely scenario S13 (impact in water), 
S24 (slide/roll into water), S23 (high obstruction), S33 (solid wall impact), 

S34 (high obstruction impact) and S4 (unclassified) for several reasons 
ino 1udiug: 

• The water impacts do not generate fire fatalities, 

• impacts into high obstructions provide unrepresentative data (e.g. 

"Tenerife" accident involved two airplanes on runway), 

• unclassified accidents have insufficient data, and 

• impact into solid wall results in highly destructive conditions 

When table 7-2 is adjusted for the aforementioned deletions it appears as 
shown in table 7-4. Included in table 7-4 are 120 accidents, which resulted 
in 94 fires and in 97b 'Known fire fatalities. Fifteen of the 120 remaining 
accidents are in the severity category No. b. How much contribution these 
accidents provide to the fire fatalities cannot be determined directly from 
the reference 1 provided data. However, from table 7-5, obtained from 
reference 1, it can be observed that category 6 accidents represent nearly 14 
percent of both of the total known categorized accidents and associated fire 
fatalities. Category 6 also accounts for approximately 68 percent of the 
unknown fatalities and 40 percent of the trauma fatalities. One approach is 
to reduce table 7-4 results by these percentages. Subtracting 14 percent from 
the 97b table 7-4 total leaves approximately 839 fire fatalities associated 
with severity level 1 to 5 accidents. Subtracting b8 percent of 12b9 unknowns 
(table 7-4) leaves 407 unknowns associated with category 1-5 accidents. 
Similarly subtracting 40 percent of 41b leaves 250 trauma fatalities 
associated with the remaining category 1-5 accidents shown in table 7-4. The 
new ratio of fire to trauma fatalities is 839/250 = 3.35b. Assuming that the 
unknowns are in proportion to the known fire and trauma fatalities for 
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TABLE 7-3. CATEGORIES OF ACCIDENT SEVERITY 


1. Minor impact damage - includes engine/pylon damage or separation, 
minor lower fuselage damage, and minor fuel spillage. 

2. Moderate impact damage - includes higher degrees of damage of 
category 1 and includes gear separation or collapse. 

3. Severe impact damage but no fuselage break - includes major fuel 

j spillage due to wing lower surface tear and wing box damage. 

\ 4. Severe impact damage - includes severe lower fuselage crush and/or 

1 class 1 or class 2 fuselage breaks, may have gear collapse, but no 

• tank rupture. 

5. Extreme impact damage - includes class 1 or 2 fuselage breaks with 

I wing separation or breaks, may have gear and/or engine separation, 

i and fuel spillage. 

I 

6. Aircraft destruction - includes class 3 fuselage breaks or 
destruction with tank rupture, gear and/or engine separation. 

i 

|Fuselage breaks: Class 1 - sections break but remain together 

j Class 2 - sections break and open 

! Class 3 - sections break and move off 


severity level 1 to 5 accidents would add 313* to the 839, for a total of 
1132. Since the accident data is predominantly for wing fuel tanks it is 
assumed that the maximum benefit that could have been derived over the 
1959-1978 period i. f all these remaining 70 category 1-5 fire accidents (table 
? -4, less category b) were eliminated, would be 1152 or 57.6/year. 

Another approach is to assume that since the 15 category 6 accidents in 
table 7-4 represents 75 percent of the total of 20 category 6 accidents (table 
7-5) and thus the number of fire, trauma and unknown fatalities should be 
reduced accordingly. Following this tack the reductions are ^ 142, 143 and 
874, respectively. The revised category 1-5 numbers are 834, 273 and 395 for 
lire, trauma and unknown fatalities, respectively. The ratio of fire to 
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trauma is 3.055 and thus proportioning the unknowns accordingly adds 298 fire 
fatalities for a total of 1132 for 20 years. On a per annum basis this equals 
56.6. 

Both approaches yield between 56.6 and 57.6 fatalities per year. For 
purposes of this study 57 per year will be used. 

Improved wing fuel containment can be achieved through elimination or 
reduction of wing fuel tank rupture and fuel line severance. Figure 7-1 
(reference 1), shows the various contributions to wing fuel tank rupture. 
Figures 7-2 and 7-3 show the relationship between fuel line fires, fuel tanks 
spills and engine/pylon breaks for wing pod and aft body engined aircraft. 

Wing breakage occurs due to distributed and/or concentrated impacts. 
Concentrated impacts, such as those associated with poles, trees, obstructions 
contribute to as many as 30 of the wing breakage accidents (<30 percent), 
while distributed impacts (ground drag, wing low) are identified on 25 
accidents (~25 percent). Inertia loading is noted as a cause in 8 accidents. 

However, from previous discussions, this latter type of loading does not 
appear to be an area for which design deficiencies exist. Tear or rupture of 
the wing lower surface may have been a contributing factor in up to 27 
accidents. Tank ullage explosion is noted in 17 to 23 accidents. However, in 
most cases a severe fire has already existed due to lack of fuel containment 
tor some other reason (e.g. obstacle penetration, fuel line severance, engine 
separation). From the reference 3 study it was noted that in 66 accidents, 48 
hard fires or the potential for fire (fuel leakage) occurred. Column, contour 
and frontal impacts numbered 18, 12, 11, respectively, in wing failure 
accidents. Correspondingly, for the reference 1 study, similar involvements 
were 21, 25 and 10, respectively. Since the frontal impacts generally 
involved obstacles such as seawalls, buildings, dikes and destructive failure, 
they are not to be considered further. The 25 contour impacts in the 
reference 1 study consist of 7 wing-low accidents and 13 ground drag 
accidents; some of the latter accidents may not involve contoured obstacles 
such as embankments, ravines, etc. For example, if only half of them did. 

























































Figure 7-3. Engine/Pylon Separation/Collapse and Fuel 
Tank Rupture, Aft Body Engined Aircraft 


then there would be 16 contour impacts and the ratios of the two studies would 
be relatively close. The reference 3 study shows that the wing root is most 
vulnerable with 21 failure occurrences versus 9 at the tip and 6 at some other 
location. The reference 1 study does not specify wing failure location, but 
based on the relative number of occurrences of columnar and contour impacts, 
it is assumed that the wing root would also be vulnerable. The reference 1 
study identifies 47 fuel line related fires, plus 12 fuel line spills with no 
fire. This means 39 fuel line spills out of a total of 97 potential fires 
associated with tank ruptures. Reference 3 data indicate 20 fuel line spills 
for 4d lire and potential fire hazard accidents. The aforementioned 
comparison of references l and 3 data is summarized in table 7-6. 


In order to assess benefits, it is necessary to compare the data from the 
two studies to determine if a priority ranking can be developed. The ranking 
of benefits is difficult because (1) The total for each study exceeds 100 
percent since the events are not mutually exclusive, and (2) each of the 
















TABLE 7-6. COMPARISON OF REFERENCE I AND REFERENCE 3 DATA 


Reference 1 

* 

No. (Percentage) 


Not Available 
Not Available 


21 ( 22 ) 

16-25 (17-26) 

27 (28) 

47 (48) 


* Percentage 

based 

on 97 

f ire 

hazard 

accidents 

** Percentage 

based 

on 48 

f ire 

hazard 

accidents 



studies lacks a complete database. As noted earlier, it is reasonable to 
assume that the failure location is similar for both studies on the basis of 
the type of loading that causes wing failure. Furthermore, it was previously 
stated that wing lower surface tear/rupture accidents in the reference 1 study 
occur primarily due to sliding over rough terrain and tend to involve severe 
fires localized in the wing area. The frequency of occurrence of this type of 
failure Is about the same as that for concentrated impacts. For simplicity, 
the same 28 percent occurrence rate will be used for completing the reference 
3 data. Now the data can be normalized for each study individually and for 
both combined, as shown in table 7-7. 

Before the rankjng Is finalized, the cause and effect relationships 
should also be examined. For example, the wing failure location is somewhat 
related to the type of impact. Tree and pole impact will probably slice 
through structure and cause failure of the leading edge. On the other hand, a 



Accident Data 

Failure location 

• Root 

• Other 

Impact type 

• Concentrated 

• Distributed 

Wing Lower Surface Tear 
Fuel Line Severance 
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Failure location a 
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Root 

• 

Other 

Impac 

’•t type 

• 

Concentrated 

• 

Distributed 

VH ng 

Lwr. Surface 

To, 

ir/Rupture 

Fue 1 

line fire 


TOTAL 

* To 197 total 


TABLE 7-7. NORMALIZED DATA 



Reference 3 


* Initial ** 

Normalized Percentages Normalized!Normalized 



43 

21.8 

31 

15.7 

22 

11.2 

26 

13.2 

28 

14.2 

48 

23.9 

198 

100.0 

** To 

203 total 


20.2 

100.0 


22.0 

10U.0 


JJ 100.0 j 100.0 

*** To 400 total 


distributed load, such as an inclined slope impact, would produce high 
bending moments at the wing root. Wing lower surface tear and rupture results 
mostly from sliding over rough terrain. In a sense, this failure is more 
related to contoured surface as opposed to impact with either distributed or 
concentrated loads. It may also relate to failure of other components (e.g. 
landing gears) which penetrate the lower surface of the wing tank. 


Concentrated and distributed loads can be considered among the causes of 
failure; the failure being wing root separation, wing penetration, fuel tank 
rupture, fuel line leak. Table 7-8 illustrates the significant wing failure 
inodes, the associated causes and applicable fuel containment concepts. One 
can readily ascertain that when considering benefits related to fire fatality 
reduction that concentrated and impact occurrence may be more correctly 
combined with the failures that result. Fuel spills occur either through fuel 
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TABLE 7-8. RELATIONSHIP BETWEEN WING FAILURE MODES AND 
APPLICABLE FUEL CONTAINMENT CONCEPTS 



Fue 1 
Lines 
and 
Compo¬ 
nents 


Inoreasd 

Root Leading Front 
Strength Edge Spar 



Wing Root 
Failure 


Distributed 
load (e.g. 
embankment, 
slope) 


Wing Fail- Local fail¬ 
ure along ure (e.g. 
span tree,pole) 

due to con¬ 
centrated an 
distributed 
loads (e.g. 
i embankment 
slope) 



tank or Line rupture. As noted earlier, fuel tank rupture is caused primarily 
by wing break, lower surface tear and gear/pylon tear or separation. The 
latter point leads to fuel line leakage in 47 out of 85 fuel tank fires as 
noted in reference L data. Wing breaks, at the root or otherwise, and lower 
surface tear leads to fuel spill and fires. Thus, fuel tank fires can 
potentially be reduced with fuel containment concepts which address the 
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failure modes listed in table 7-8. Distributed loads are considered to 
influence wing root failures, while concentrated loads will effect wing span 
structural modifications and, possibly, wing lower surface tear/rupture. With 
this approach in mind, the data presented in table 7-7 is reorganised to 
reflect the elimination of concentrated and distributed impact loads. Fuel 
line fires are still listed although their contributions may be reflected in 
three failure modes; wing root failure, wing failure along the lower span, and 
lower wing surface tear/rupture. 

In reality, one or more failures could contribute in a fatal accident. 
Unfortunately, the accident data does not allow one to distinguish the 
relative contributions of each failure to the fire fatalities in any of the 
accidents. It would also be unrealistic to think that any one improved fuel 
containment concept would totally eliminate fire fatalities, no matter how 
weLl conceived the design. The data contained in table 7-7 is reorganized to 
reflect distribution of wing failure modes and is presented in Table 7-9. The 
premises of how the data is distributed is noted. The data is organized in 
table 7-9 in an attempt to provide perspective, so the penalty trade-off 
(weight/cost) can be assessed on the basis of relative contributions and 
different levels of reduction. 


7.1.2 Fuselage Fuel Containment 


The preponderance of data from the accident studies described in 
references 1-3 are for transport airplanes which do not contain auxiliary 
fuselage fuel tanks. Consequently, the data cannot be used in a direct 
fashion to make an assessment of fire fatalities related to fuselage fuel 
tanks. However, reference 1 presents data which may be useful in evaluating 
the potential for fire in the event auxiliary fuselage tanks were utilized. 

T.n reference 1, fifty-seven (57) to sixty-four (64) accidents are reported in 
which fuselage lower surface rupture occurs (no above floor damage). These 
accidents are in addition to the 71 of the 153 accidents which may have 
experienced one or more fuselage breaks. Excluding water entry rupture, 57 

























TABLE 7-9. CONTRIBUTION TO FIRE FATALITY 


Wing Failure 

Modes 

Normalized Percent 
Contribution* 

Related Fatalities 
Per Year 

fuel line severance 

35.5 

20.4 

wing root break 

27.75 

15.8 

wing span break 

22.75 

12.9 

wing lower surface 
tear./ rupture 

14.0 

7. ° 

TOTAL 

100. ^ 

57.0 


^Obtained using following premises from data in table 7-7: 

Fuel Line Severance = Fuel Line Severance + 50% Distributed Impacts + 50% 
Concentrated Impacts 

Wing Root Break = Wing Root Break + 50% Distributed Impacts 

Wing Span Break = Other + 50% Concentrated Impacts 

Wing Lower Surface Tear/Rupture = Wing Lower Surface Tear/Rupture 


lower surface rupture accidents involved 4233 occupants, of which 841 (20 
percent) were fatalities. Of these 57 accidents, 34 were accompanied with 
extensive lower fuselage surface rupture and account for 818 of the 841 
fatalities. Fifteen of the 57 accidents had fatalities, of which 12 had fire 
1 atalities. If the ratio of fire fatalities to total fatalities is the same 
is tor the total of this study (35.7 percent) then 300 would have been fire 
iatalities. Up to this juncture all fire fatalaties in the accident study are 
asumed to relate predominantly to wing fuel tank systems. On the assumption 
'hat if auxiliary fuel tanks and wing center tanks were installed and exposed 
to a severe crash environment they would contribute to fire fatalities in the 
same 35.7 percent ratio there would be potentially 241 more fire fatalities 
over the 20 year period. This figure is arrivied at by multiplying the 
























remaining 3392 non-fatalities (4233-841) by the .071 which is the percent 
estimated fire fatalities to total onboard obtained (300/4233). On a per 
annum basis this is ^12. 


Another set of data, relating to fuselage floor displacement, is 
presented in reference 1. For accidents with this type of structural behavior 
there are as many as 40 occurences. Exclusive of accidents involving water 
entry or floor displacements without fuselage breaks there are 20 such 
occurences in which 500 of the 1816 onboard occupants experienced fatalities. 
Using the same reasoning as for the fuselage lower surface accidents, 179 are 
assumed to be fire fatalities (.357) associated with wing fuel tank failures. 
This ratio to total onboard is 9.86 percent. Multiplying the remaining 1316 
nonfatal passengers by this latter ratio yields 130 potential fire fatalities 
associated with fuselage fuel tanks for the 20 year period for this type of 
accident. On a per annum basis this equates to 6.5. Since some severe 
fuselage breaks could be associated with category 6 accidents these totals 
could reduce to 14 percent or to 122 and 6.1 for 20 years and per annum, 
respectively. 

Thus, the totals for both fuselage lower surface tear and floor 
displacement combined with fuselage breaks is 363 fire fatalities in 20 years 
or % 18 per year. 

7.1.3 Summary of Potential Fire Fatality Reductions 

The estimated potential benefit that could be achieved with 
contaLntainment, in terms of reduced fatalities per annum, is as 

wing fuel containment - 57.0 

fuselage fuel containment - 18.0 

Tiie manner in which the estimated reduced fatalities per annum were 
determined is summarized in figures 7-4 and 7-5 for wing and fuselage fuel 
containment related fire fatalities. 


improved fuel 
follows: 
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The distribution of the benefits is divided into four areas as follows: 

1. Wing root modifications with and without wing center section. 

2. Wing span modifications with a CRFS fuel system. 

3. Auxiliary fuselage tank with a CRFS. 

4. Other structural modifications; i.e., landing gear separation, 
engine/pylon attachment. 

Table 7-10 is a matrix of assigned benefits into the four above noted 
areas. The modifications to the landing gear and engine pylon are not 
described in this study but are shown in table 7-10 to indicate that a portion 
of the fire fatalities could be reduced by other than the fuel containment 
concepts covered in this analysis. Both landing gear and engine/pylon 
separation for the most part would result in the need for improvements in the 
other areas to achieve fire fatality reductions. 

The benefit analysis ignores the following: 

I. The trend in terms of fatal accidents per flights and miles has shown 
a decline since the late 1950's as can be observed in figure 7-6. 

The trend for jets and U.S. travel is particularly good. Considering 
all aircraft and world travel during the decades of the 1960's and 
I970's, fatal accidents have been reduced by more than half. 

However, while this trend would decrease the potential benefits (less 
fire fatalities) derived earlier, the favorable trend would be offset 
by such factors as: 

a) The accident data partially accounts for the trend since the mid¬ 
point of the three studies is 1969. 

















































































this category could account for up to an additional 37.5 
fatalities/years or an increase of about 50 percent. 

2. Reduction in fire-related serious injuries 

The reference 3 study shows that the ratio of fire fatalities to 
fire-related serious injuries is 4:1. This ratio from the reference 

2 study is about 2.4:1. Reference 58 reports that the average 
settlement of a serious injury for several accidents between 1977 and 
1979 was $81,400. The same reference indicates that the FAA placed a 
value of $650,000 on a human life in 1984. This amount is higher 
than the average recovery amount of $580,000 for commercial aircraft 
accident fatalities from 1959 to 1982. Thus, using the FAA value, a 

3 ratio of about 8:1 may exist for fatality versus serious injury. 
Based on these to ratios (fatality/injury and life cost/injury cost) 
the addition of serious injuries to the potential benefits would only 
increase the total benefits by approximately 3 percent to 5 percent. 

3. The introduction of fuel containment concepts will not totally 
eliminate fire fatalities. Reference 9 analysis used a 50% fire 
fatality reduction factor. 

Considering all the factors noted in 1, 2, and 3 the estimate of 57 and 
18 fatalities/year associated with wing fuel and fuselage fuel containment 
concepts would appear a reasonable benefit goal. 

7.2 PENALTY ANALYSIS 

In Section 6, the "Review of the state-of-the-art Technology" provided 
some indication of alternative concepts for improving both wing and fuselage 
fuel containment. A preliminary priority ranking of individual concepts led 
to some general approaches which reflected three levels of penalty/benefit 
relationships, namely: 

1. Incorporation of crash resistant components (no bladders) - low/low 

2. Wing structure modifications - high/moderate 

3. Fuselage crash-resistant system - moderate/moderate 
























The benefit analysis in the previous section indicated that three failure 
modes could be identified as contributing to fuel tank rupture and fuel line 
severance and thus to fire fatalities. As depicted in table 7-8, from a 


design perspective, each of the failure modes can be considered to be affected 
by two or more design concept approaches. Each of the failure modes, identi¬ 
fied in table 7-8, is addressed n the penalty analysis described in this sec¬ 
tion. Several of the design concepts described in Section 6.6 are utilized. 

The penalty analysis follows the approach outlined in reference 9. The 
procedure is to resize the aircraft by retaining the existing range and 
payload while incorporating fuel containment weight penalties. The reference 
9 study suggests that the reduction in payload, which is the alternative to 
resizing, is uneconomical by a factor of A. The study described in reference 
9 used a Convair 990 as the typical aircraft and 1969 as the base year. Data 
for that airplane indicated that the airplane gross weight increases 4.3 lb. 
tor each 1.0 lb. of structural weight added (resize factor of 4.3). The 
current aircraft are more fuel efficient. A more suitable resize factor of 
2.15 is used in this study, particularly since the trend is to the two-engine 
narrowbody and widebody airplanes as is noted in figure 7-9. 

The concepts included in the penalty assessment are as follows: 

1. Wing root modification with and without a CRFS in the wing center 
section 

2. Wing span structural modification including crash resistant fuel 
cells 

3. Fuselage auxiliary crash resistant fuel system 

The following is a brief description of each: 

• Wing Root Modification to Incorporate Crash-Resistant Bladder Cells 
The premise for selecting this approach is that failures in the 
uroxiinitv of the wine root are freauent occurrences nrimarilv as a 























result of distributed loads which produce high bending and shear loads 
back at the root and secondarily due to concentrated loads which can 
result in failure of the fuel tank. Increasing the wing root strength 
could prevent separation only at that location. Unfortunately, the 
breaks are rarely that precise. More likely the breaks leave a stub 
wing as shown in figure 7-10 (reference 6) and fuel spillage can 
occur. A design consisting of double walls at the wing break point is 
faced with the same problem. Furthermore, this design concept is 
diametrically opposed to normal design requirements which is to 
provide maximum strength at the point of highest anticipated load. 

The use of high strength integral tanks is not suggested, because this 
design does not address the problem, as was discussed in Section 6.6. 

The approach that is suggested includes the use of a crashworthy fuel 
system (tank material and components) in a compartmentized segment of 
the wing inboard of the inboard engine and adjacent to the fuselage. 
Fuel spillage in this region is considered to be more lethal than from 
outboard tanks due to their location in proximity to the passengers. 
Furthermore, if wing failure separates outboard fuel tanks, then they 
are less likely to contribute to the fire if the airplane continues to 
move. 

A current wide-body airplane (L—1011) is used to display the design 
approach. A typical wing inboard section, with wet cell fuel tanks, 
is shown in figure 7-11. As can be observed, the interior plumbing is 
extensive. 

Two ways to provide fuel bladder cells in the wing along the wing root 
rib are examined. One method (see figure 7-12) is to install the 
cells in the existing bays in the wing formed by the wing ribs. The 
second (see figure 7-13) is to modify the wing structure to allow 
installation of cells of a specified width along the length of the 
wing root rib. While this second method would be a much larger design 
change, it would provide smaller bladder cells and a smaller amount of 
fuel contained therein. 

Wing structural provisions required for the latter method to be 
installed in an L-lOll aircraft area: 

1. Install a new wing rib parallel to existing wing root rib in the 
wing to form a new inboard boundary of the inboard wing tank. 

2. Add tank bladder support structure to accept the new tank end rib. 

3. Install three bulkheads in the wing between the existing tank end 
and the new tank end. These should match up with center wing 
bulkheads at FS 1043, FS 1103, and FS 1163. 












































































1 QUANTITY GAGE SYSTEM PROBE - 
INTERNALLY MOUNTEO 
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Fuel System provisions required for either method to be installed in 

an L1011 aircraft are: 

1. Install 4 separate but interconnected bladder cells as shown in 
figures 7-12 and 7-13 to form an auxiliary tank in each wing. 

Tank design shall comply with the requirement of FAR 25.963, 

25.965 and 25.967. 

2. Install a fueling valve in the new tank. Assume that the 
compliance to FAR 25.979 is not compromised. 

3. Install vent system provision in the new tank which connects with 
the existing adjacent wing tank vent system. The new vent system 
shall comply with the requirements of FAR 25.969. Relocation of 
the climb vent line is required on the plan that uses existing 
wing structure. 

4. Install a scavenge/transfer system in the new tank using motive 
flow from the existing adjacent boost pump. These provisions 
shall comply with the requirements of FAR 25.957. 

5. Install tank sump drains to allow drainage of excessive quantities 
of water from the new tank. The new sump drain provisions shall 
comply with the requirements of FAR 25.971. 

6. Install a gravity transfer system to allow fuel flow from the new 
tank to the existing adjacent wing tank. This system is comprised 
of a series of flapper check valves through the common wall of the 
bladder tank and the existing wing tank. 

7. Modify the existing fuel quantity gaging system to accommodate the 
installation of the new tank as an auxiliary tank to the existing 
adjacent wing tank. This modification shall not compromise the 
existing compliance with the applicable requirements of FAR 
25.1337. 


If either of the two methods were installed in a L1011 aircraft, the 
bladder cells construction would have to accommodate the following 
design features of the existing systems: 

L. Quantity gaging system harness connector penetration of the 
bulkhead at BL116. 

2. installation of a quantity gaging system probe to an internally 
mounted unit in the new auxiliary tank. 


3. Revise quantity gaging system harness support system through the 
bladder cells. 


















4. Existing penetrations o£ bulkhead at BE 116 to accommodate fueling 
manifold, tank 2 engine feed line and cross feed line. 
Additionally, if an aircraft with center section fuel tanks were 
used, center section motive flow line, transfer return line and 
quantity transfer line. 


Installation of bladder cells in wing center section tanks on a 
L1011-500 aircraft could be accomplished using a cell for each of the 
three bays of each tank (figure 7-14). Adequate interconnecting 
provisions would have to be provided. Bladder cell penetrations would 
be required for all existing plumbing in the tanks. Quantity gage 
system wiring would have to be supported in a manner that is 
compatible with bladder cell design. The plumbing inside each tank 
(which is considerable along the rear beam at FS 121) would have to be 
supported in a manner that is compatible with bladder cell design. 

The scavenge/transfer system would require redesign of the suction 
tubes. 

The certified capacity of both the wing and center section tanks would 
be reduced because of the bladder cells being out of wing plank risers 
and bulkhead stiffeners. The unusable fuel quantity would increase 
because of the location of the bladder cell interconnecting parts 
being above the tops of the rib caps. 

Wing Span Structural Modifications 

To be completely effective, wing span structural modifications could 
involve a number of concepts; including leading edge protection, front 
spar protection, forward skin reinforcement and crash-resistant 
bladders and components. A major concern in the use of this concept 
is that unless protection is provided for an impact velocity > 140 
ft/sec the reduction in fire fatalities will be compromised. Even 
with protection above an impact velocity of 140 ft/sec, the use of 
crash-resistant fuel system is probably required to achieve the 
maximum reduction in fire fatalities. Several concepts to be 
considered in this approach, such as front spar protection (figure 
6-4(a)) and redesign of upper and lower skins (figure 5—3(b)) have 
been discussed previously. Structural reinforcement which includes 
heavier spar rails, added chordwise stiffeners and thicker skins with 
and without the addition of foam/film to protect and encase were 
described in reference 5. The concepts presented in Reference 5 are 
intended to reduce impact damage due to contact with trees, rocks and 
other penetrating obstacles. Tests of similar structure have been 
performed for impact speeds up to 44 ft/sec and with wooden poles up 
to 17 inches in diameter. The use of foam/film is intended to allow 
normal fuel flow but provide a barrier to rapid flow out of a rupture 
in the fuel tank cell. Concern in the use of foam is discussed in 
Section 6.6 and resulted in tills concept being rated poorly and, thus, 
ranked low in relation to other concepts. The redesigned skin 
concepts are discussed in Section 6,6. They provide good impact 
resistance but could be difficult to manufacture. Good impact 
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resistance is a relative term. The design would have to be effective 
at an impact velocity of at least 140 ft/sec. 

• Crash Resistant Fuselage Auxiliary Fuel Tank System 


Auxiliary fuel tanks art; in use in several 
systems are discussed in Section 1.2. The 
supported in a dedicated structural box is 
study. The assumption is that crash resis 
lieu of existing non-crashworthy systems, 
arrangement that would be required for an 
The various vents, valves, and pumps would 
interconnecting tanks. The effect of a fa 
self-sealing devices used in the forward 1 
are noted below is applicable not only to 
tanks also. 


transport airplanes. These 
crash resistant bladder 
being considered in this 
tant systems will be used in 
Figure 7-15 shows a typical 
auxiliary fuselage tank. 

have to be provided in the 
il-closed mode of any 
ines in a fuel system which 
fuselage tank but wing fuel 


System 


Effect 


Fueling manifold l.ne 
Engine feed lines 


• Tank vent lines 


• Jettison lines 


Unable to refuel tank on the ground. 

Loss of use of fuel in the tank. 
Possible loss of engine power. 

Possible collapse of tank structure. 

Loss of jettison capability. 


• Scavenge/transfer lines Loss of use of fuel in a section of the 

tank. Increase in unusable fuel. 

7.2.1 Weight Penalties 

Reference 57 provides data which indicates current and trends with regard 
to transport airplane fleet mixes. For example table 7-11 shows airplane 
fleet mixes for 1985 and projected for 1997. The average size with regard to 
passengers in the fleet is expected to increase from 145 seats to 180 seats 
during that time span. 

Since the fleet will consist of a range of airplane sizes, the weight 
penalties will vary substantially from model to model. Accordingly, it was 
decided that the weight penalties would be more appropriately determined from 
the "representative" aircraft which is a 2 engine narrow body model. This 
type of aircraft is expected to represent 53.9 percent of the U.S. commercial 






































fleet in 1997. For purposes of calculations in this section the following 
premises are made: 


• The representative airplane is a 2 engine narrow-body aircraft of the 
following parameters: 

156 - passengers 

150,000 lb. - GTOW 
75,000 lb. - OEW 

8,500 gal - Total fuel tanks capacity 

2500 gal. aux. fuselage fuel tank 
3000 gal. wing center fuel tank 
3000 gal. wing outboard fuel tank 

• CRFS (bladder material and fittings) requires .4 lb/gal. weight 
increase over non-bladder type tank. The associated weights 
calculated for a different size airplane are scaled to the 
representative 2 engine narrowbody configuration by the ratio of the 
fuel tank capacities. 

• The CRFS reduces fuel volume by 10 percent 

• A resizing factor of 2.15 is used 


A summary of weight/volume penalties associated with a CRFS are shown in 
figure 7-16. Included in figure 7-16 is the weight penalty range for various 
aircraft configurations obtained from referenced test and analysis data, as 
well as the values used in this current study. 

TABLE 7-11. U. S. COMMERCIAL FLEET MIX 


TOTAL NO. AIRPLANES 
DISTRIBUTION 

2 Englne/NB 
4 Engine/WB 

3 Engine/WB 

4 Engine/NB 
3 Engine/NB 
2 Engine/WB 


TYPICAL 

PERCENTAGE (%) PERCENTAGE (%) MODELS 


MD-80,B737-300 
B747 

1 DC-10,L10U ,MD-li 
DC-8,B707 
B727 

B767,A320,A310 


= Narrowbody WB = Widebody 
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The fuel capacities used are slightly higher than current generation 
2-engine narrowbody airplanes, as is the number of passengers and GTOW. The 
auxiliary fuel tank capacity is based on a B727 configuration. It may be 
higher than that used in other 2 engine narrowbody airplanes. 

Table 7-12 shows the estimated weight penalties for the various concepts. 
The weights were estimated as follows: 


1. Wing Root Modifications 

A L1011 widebody design was used as a baseline configuration from 
which existing structure would be modified or redesigned as shown in 
figures 7-10 and 7-11. The L1011 fuel tank capacities are 
approximately: 

Center section tank - 8100 gal. 

Inboard tanks - 16100 gal. 

Outboard tanks - 7660 gal. 

The estimated fuel quantity for which a CRFS would be installed near 

the root is estimated at 2618 gallons/side (5236 gal. total). Using 
about 1/4 the fuel capacity for a "representative" airplane results 
in about 1300 gal. for the modified design. The redesign involves 
Less area of the inboard wing and thus about 650 gal. is used in the 
calculations. By the same token the redesign may afford less 
protection for fire fatality reductions, which was recognized 
previously in the assignment of benefits. About 250 lb. of 
structural weight is included for both the modified designs and 
redesign to account for compartmentization of the fuel cells. The 
wing center section fuel section is taken as 2000 gallons since 1000 
gallons was assigned to the inboard tank. This figure also 
represents about 1/4 of the wing center tank capacity of the baseline 
LI 01 1. 

2. Wing Span Mollification and CRFS 

The structural weight estimates Lor this concept comes from CV990 
study (ref. 9). These estimates were doubled to account for 
increased skin gauges and stiffeners to resist higher impact 
velocities. The reference - study also provided for 770 lb. foam. 

The current concept disregards the use of foam but utilizes a CRFS. 
The fuel capacity of the wing tanks (3000 gal.) is used. The 
compartmentizing of the fuel cells requires structural weight to be 
added in addition to the wingspan front spar and leading edge 
changes. Thus, the total structural weight used is 3 times the 
reference 9 estimates. 

































3. Crash Resistant Fuselage Auxiliary Fuel Tanks 


The weight penalty associated with this concept is strictly .40 
lb/gal. x fuel quantity. No structural weight is considered other 
than in resizing to maintain payload and range. The implementation 
of this concept is easier than in the wings because space limitation 
is not as severe. For fuel tanks with engine non-crash resistant 
bladders the penalties might be reduced by a factor of 2.0. 

Table 7-12 is organized such that the three major concepts as well as 
combinations are presented. Where fuel volume loss is indicated an additional 
penalty of .40 lb/gal x volume loss for additional fuel contained in crash 
resistant cell is included. The last column shows the weight for the 2.15 
resizing factor. 


7.2.2 Cost Penalties 

Costs for the incorporation of each of the concepts would include 
nonrecurring (tooling, design, manufacture) recurring (fabrication, material, 
engineering support, insurance, etc.) and fuel operating costs. These typesof 
costs were assessed by the Aerospace Industries Association (AIA) in a recent 
response to strength rule changes (reference 59). For two levels of 
structural modifications the arrival cost distribution was estimated in 
current 1986 dollars to be in $ per lb. per annum as follows: 


nonrecurring: 63.00 69.00 
recurring: 27.00 27.00 
fuel: _l_2_.00 1 2.00 

102.00 108.00 


Since the reference 59 estimates are current it is reasonable to expect 
the modifleations noted in this study to be in the same region. The most 
significant differences would probably be associated with tooling and testing 
of major structural changes such as wing root redesign or wing span 
redesign as opposed to installation of a CRFS in the fuselage auxiliary tank. 
Tlie reference 9 cost study was performed for a four engine jet transport 
(CV990) in which 380 lb. of structural and foam weight was to be added. A 
comparison of the 1969 dollars/lb. associated with that study and the 1986 
dollars/lb. for the current study is noted as follows: 
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Costs 

1969 study ($/lb) 

1986 study ($/lb) 


estimated nonrecurring 

22.50 

63.00 


fly-away recurring 

9.60 

27.00 


operating fuel 

4.40 

12.00 

£ 


$36.50 

$102.00 


The nonrecurring 1969 costs were estimated using the same ratio that 
exists between the other cost comparisons. The 1986 cost figures are 2.8 
times greater than the 1969 cost figures. This represents approximately a 6 
percent increase per annum over the last 17 years. The 1986 figures would 
appear to be representative in light of the 1969 costs. The design concepts 
which would have a lesser impact on nonrecurring costs, such as a fuselage 
CRFS (wing center section and auxiliary tank) could be at the lower end of the 
cost spectra ($80/lb - $100/lb), while the major structural changes (wing 
modifications) are probably at the higher end ($100/lb - $120/lb). For 
purposes of this study in which a comparative assessment of concepts is being 
made, cost factors of 1.0 and 1.5 will be assigned on the basis of relative 
complexity to cover a range from a low of $80/lb to a high of $120/lb. 

7.3 WKIOKT PENALTY VERSUS POTENTIA L FATALIT Y REDUCTION 

The estimates of weight penalty versus potential fatality reduction is 
shown in table 7-13. From table 7-13 it can be noted that the last column 
which denotes the ratio of weight versus potential reduction is an indication 
of efficiency of concepts. The lower the ratio the more desirable the change 
from a weight approach. For the data presented, the individual concepts 3b 
and la are lowest and concept 2 is highest. Combinations of concepts 
fall between the extremes since they represent weighting factors. 

The estimates including cost factors assigned to the respective concepts 
are also shown in table 7-13. Once again the lowest ratio is most desirable. 
On a relative basis the sequential order from a cost effectivity viewpoint is 
concept 3 followed by concepts 1 and 2. 















































The numbers in table 7-13 reflect both a subjective assessment of benefit 
distribution and relative cost factor evaluation. Obviously, the numbers 
could change with moderate reassessments. However, slights changes in benefit 
and cost would not alter the fact that table 7-13 suggests that wing span 
structural modifications including a CRFS will be the least effective approach 
while a CRFS for the fuselage auxiliary tanks and wing root structural 
modifications provide potentially the most effectiveness . 
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SECTION 8 


CONCLUSIONS 


CONCLUSIONS 


• The major factor in survivable crash related fatalities are fire and 
smoke 

• No individual design concept can be expected to reduce all fire 
fatalities 

« The greatest gain in crashworthiness protection might result from 
containment of fuel with fuel systems which are more resistant to 
tears, rupture and puncture along with protection from penetration 
loads 

• Design Concept Effectivity can be measured in terms of the benefit to 
penalty ratio that can be achieved 

• Fuselage fuel containment concepts are more practically attainable 
than wing fuel containment concepts primarily because they are more 
state-of-the-art and thus less potentially costly 

• The application of crashworthy bladder tanks to integral wing tanks 
cannot be accomplished without a complete redesign of the wing 
because of its multicellular construction 
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subcommittee reports: 

B.1 Explosion Suppression, Fuel Tank Foam/Foil end Fuel Tank Inerting 

Subcommittee Summary 

Fuel tank fires can be prevented if the oxygen concentration in the vapor 
space above the fuel is maintained below combustion limits. Nitrogen purging 
of the fuel and vapor space can be an effective means of accomplishing this 
effect. Such a system is currently installed on all C-5A airplanes. However, 
the system involves a complex network of valves, pressure regulators and 
cryogenically stored nitrogen which represents a significant weight and 
economic penalty to the airplane. The problems of storing sufficient 
cryogenic nitrogen for a complete flight plan may be alleviated by an on-board 
nitrogen gas generation system such as is currently under development. 

However, this system is heavy and must undergo much more development testing 
before its viability for production installations can be considered. 

An alternative to fuel tank inerting is the installation of heat 
reticulated foam or expanded metal foil in the fuel tanks. These system have 
the advantage of being passive. They prevent excessive overpressures from 
developing and eventualLy completely extinguish any fires that are generated 
within the tank. Foams are currently being used effectively in many military 
aircraft used in close support of combat troops where small arms incendiary 
projectiles are a constant threat. For civilian aircraft it is difficult to 
justify the severe weight penalties, impaired normal fuel, tank maintenance 
activities, and additional maintenance problems created by foam shredding and 
enhanced bacterial growth probabilities in water accumulations at the tank 
bottoms. 



















Much of the foam discussion also applies to expanded metal foils in fuel 
tanks. Foils do have the advantage of a significantly higher melting point in 
a fire environment (1100°F compared to 360°F for foams). However, they are 
semi-rigid and present complex structural design problems which must be 
resolved in order to permit access to fuel tank, components for service 
ma i ntenance. 

Explosion suppression systems are used in some fuel tank applications 
where the tank geometry is relatively simple and direct communication to a 
detector element is available. The basic concept for this system is to sense 
the flame of an incipient explosion by an infrared or ultraviolet light 
detector and discharge a fire extinguishing agent to quench the fire before a 
hazardous overpressure can develop. However, numerous studies of the 
multi-celled fuel tanks in today's transports have shown that the complexity 
of the installation overrides its potential value because of the numerous 
detectors and suppressors required. 

The above methods for preventing tank fires will be ineffective in 
accidents where major fuel tank rupture has occurred. In such cases, the 
major hazard is the external pool of burning fuel. Some degree of protection 
would be provided where minor damage occurs. However, the attendant external 
fire would be far less severe in that situation. In such circumstances, 
equivalent protection can be provided by a simple flame arrestor installed in 
the fuel tank vent line to preclude propagation of flame down the vent and by 
systems which ensure that engine fuel is shut off in fire emergencies. Direct 
ignition of vapors in the tank by conduction of heat through the tank wall is 
unlikely for small fires inasmuch as the vapor space oxidation rate is too low 
to become self-propagating. Tests at FAA Technical Center have shown that 
this condition can result in the tank self-inerting as the oxygen is consumed 
by the slow oxidation process. 
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The above systems were evaluated in terms of weight, cost, maintenance, 
reliability, retrofit capability, and effectiveness. The results of this 
evaluation are shown in figure B-l. In every category the incorporation of a 
flame arrestor and assumed emergency fuel shutoff to the engines is rated as 
better than, or equivalent to, the more complex, systems currently under 
discussion. Of the more complex systems, only the inerting system appears to 
offer some improvement in the post-crash fire environment. Figure B-2 shows 
an assessment of the potential benefits that might have accrued if inerting 
systems had been incorporated in commercial jet transports since their 
inception. Of the 13 accidents involving post-crash fires, tank inerting had 
the potential of reducing fatalities or hull damage in only four cases. In 
each of these four cases, the relatively simple approach of vent flame 
arrestor or suppressor and improved methods of fuel cutoff in the engine feed 
line was determined to be as effective as the inerting system. 

These simple and reliable systems are presently installed in most 
commercial transports. They are typical of the tried and proven fire 
protection designs which the aircraft industry has pursued throughout its 
history. Since 1958, this policy in jet transport design has resulted in a 
reduction in accidents involving fuel vapor explosions from 1.4 to 
approximately 0.1 per million departures (figure B-3). 

From the above survey of existing and proposed ways to eliminate fires 
inside of jet transport fuel tanks, the group concluded the following: 

• When major tank rupture occurs, none of the proposed systems 
significantly reduce the fire hazard to passengers and <>quipr,. • . 

• Inerting, quenching, and suppression incur t remon-' .s > 
operational penalties for the snail benefits offeree. 

• Systems currently used in commercial ai rcr.u t • -• : 
equivalent to inerting, queueing, and supples-i 
tanks remain intact. 
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Figure B-l. Elimination of Fires Inside Fuel Tanks 
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Figure B-3. Tank Explosion Accident Rate World Wide Air Carriers 
All Operators 


B.2 Crash-Resistant Fuel Tanks Subcommittee Summary 


The terra crash-resistant fuel tank is generally associated with fuel 
tanks that are capable of remaining reasonably intact during a crash event, 
thereby eliminating or minimizing fuel spillage and the corresponding 
post-crash fire threat to surviving passengers. If achieved, this concept can 
eliminate most destructive external fires and complement the simple measures 
discussed in the previous section. The highly visible success of crash- 
resistant fuel systems installed in Army helicopters makes direct application 
of this technology to jet transport aircraft tempting. However, the obvious 
differences in aircraft characteristics, crash scenarios, and accident 
experience may dictate another course of action. 

The obvious difference in fuel system and aircraft design and the crash 
scenario is further complicated by the definition of impact survivable. The 
Army bases its determination of whether or not an accident is impact 
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sarvivable on an assessment of the inertia forces transmitted to the occupant 
through his seat and restraint system and on whether or not the cabin 
structure collapsed within the occupant's envelope. On the other hand, the 
FAA considers a crash survivable if one occupant survives the impact event, 
because of the size of transport aircraft and the correspondingly high energy 
absorbing potential, it is conceivable that some occupants will survive very 
high-crash impact velocities. On the other hand, because of the fairly small 
size of Army helicopters, all occupants and systems are exposed to approxi¬ 
mately the same crash environment facilitating a relatively clean definition 
of an impact survivable crash. 

The transport fuel tanks fall broadly into two categories - integral wing 
tank and fuselage tanks. The application of crashworthy bladder tanks to 
integral wing tanks cannot be accomplished without a complete redesign of the 
wing because of its multi-cellular construction. Furthermore, it cannot be 
said with certainty that crash-resistant fuel tanks would provide fire 
protection in crash scenarios that include wing separation. 

Current commercial aircraft typically carry fuel in the wings and in some 
cases the fuselage. Fuselage fuel may be carried in the center wing structure 
or in a pressurized area such as a cargo compartment. Fuel tanks in the 
center wing structure and fuselage are designed to meet the g loads prescribed 
for emergency landings (figure B-4). 

Federal regulations require that damage to the airplane main landing gear 
system during takeoff and landing shall not cause spillage of enough fuel to 
constitute a fire hazard. The fuel tank and landing gear support structure is 
designed to a higher strength than the gear to prevent fuel tank rupture due 
to an accidental landing gear overload. This design requirement is further 
extended to include structural attachments to the wing fuel tank which might 
be overloaded during a wheels-up or partial wheels-up landing. Flap hinges 
and engine mounts for example ar.* designed to fail without rupturing the tank. 
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Figure B-4. Fuel Tank Load Factors 

In airplanes Laving fuel tanks located within the pressurized area, 
typically the cargo compartment, particular attention is paid to minimizing 
the risk of fuel spillage. An example of one such design is shown on figure 
B-5. The tank is composed of an aluminum honeycomb outer shell with bladder 
cells inside. The tank is supported from the passenger floor beams and 
fuselage frames in such a manner as to preclude body structure deflections 
from loading the tank. Clearances from adjacent structure are provided around 
the tank. 

The fuel and vent lines that connect the tanks to the main fuel system 
incorporate drainable and vented shrouds. These lines are either designed to 
break away from the auxiliary tank or sufficient stretch is provided to 
accommodate tank movement without causing fuel spillage. Hoses that are 
required to stretch are subjected to what is normally referred to as the 
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Figure B-5. Cargo Compartment Tank Installation 


guillotine test. The hose is pressurized and clamped at both ends to simulate 
its mounting in the aircraft, then a sharp pointed load is applied in the 
middle of the hose. The hose must not leak when stretched to its maximum. 


In addition, prior accident history is reviewed to ensure that the tank 
installation will minimize the possible leakage of fuel. For example, 
accidents or incidents where the gear has separated are reviewed to insure 
rhat the tank will not be hit by a displaced gear. Also, incidents or 
accidents where the body has been crushed are reviewed to insure that there is 
adequate clearances between the body and the fuel tank. In addition, 
incidents or accidents where the body has broken are reviewed to ensure that 
the auxiliary tank is not located across the place where such breaks typically 


occur. 
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In summary, the subcommittee states that "the body fuel tank design: 


• Exceeds FAR requirements. 

• Is more rugged than center section tanks. 

• Provides for considerable clearance. 

• Includes fuel lines allowance for tank displacement without breakage. 

• Accident history indicate minimal spillage exposure. 


Without test verification it cannot be said that crash-resistant tanks 
installed in the transport aircraft fuselage would be completely effective. 
Although it might not be in the optimum configuration, it would certainly be a 
significant improvement over the current bladder tanks since this improvement 
would be realized adjacent to occupants where crash fire protection is 
urgently needed. 

To this end, an evaluation of crash-resistant fuel tank installations in 
wing/fuselage areas was performed. A summary of the results of this 
evaluation is shown in figure B-6. As anticipated, the wing installation 
shows excessively high penalties in almost every category evaluated. On the 
other hand, the fuselage installation resulted in only low to moderate 
penalties. 

The results of this brief evaluation indicate that a careful analysis of 
crash data history to explore modes of failure is essential to determine if 
improvement of fuel retention during transport airport crashes can be 
achieved. A research program involving the three domestic widebody airframe 
manufacturers is anticipated to be initiated near the end of 1979* for the 
purpose of developing crash scenarios and recommending future test and 
analysis effort for the development of improved crashworthiness." 


*These studies were completed and reported on in references 1-3. 
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figure B-6. Crash-Resistant Fuel Tanks Summary, Evaluation of Concepts 
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APPENDIX C 

SUMMARY OF COVERAGE BY EXISTING REGULATIONS AND ADVISORY CIRCULARS 


C.1 COVERAGE BY EXISTING FEDERAL AVIATION REGULATIONS 

25.561 General 

(a) The airplane, although it may be damaged in emergency landing 
conditions on land or water, must be designed as prescribed in this 
section to protect each occupant under those conditions. 

(b) The structure must be designed to give each occupant every 
reasonable chance of escaping serious injury in a minor crash 
landing when - 

(1) Proper use is made of seats, belts, and all other safety design 
provisions; 

(2) The wheels are retracted (where applicable); and 

(3) The occupant experiences the following ultimate inertia forces 
acting separately relative to the surrounding structure: 

(i) Upward 2.0 g 

(ii) Forward 9.0 g 

(iii) Sideward 1.5 g 

(iv) Downward 4.5 g, or any lesser force that will not be 
executed when the airplane absorbs the landing loads 
resulting from impact with an ultimate descent velocity 
of five ft/sec at design landing weight. 

(c) The supporting structure must be designed to restrain, under all 
loads up to those specified in paragraph (b) (3) of this section, 
















each item of mass that could injure an occupant if it came loose in 
a minor crash landing. 

25.721 General 

(a) The main landing gear system must be designed so that if it fails 
due to overloads during takeoff and landing (assuming the overload 
to act in the upward and aft directions), the failure mode is not 
likely to cause - 

(1) For airplanes that have passenger seating configuration, 
excluding pilots seats, or nine seats or less, the spillage of 
enough fuel from any fuel system in the fuselage to constitute 
a fire hazard; and 

(2) For airplanes that have a passenger seating configuration, 
excluding pilots seats, of 10 seats or more, the spillage of 
enough fuel from any part of the fuel system to constitute a 
fire hazard. 

(b) Each airplane that has a passenger seating configuration excluding 
pilots seats, of 10 seats or more must be designed so that with the 
airplane under control it can be landed on a paved runway with any 
one or more landing gear legs not extended without sustaining a 
structural component failure that is likely to cause the spillage of 
enough fuel to constitute a fire hazard. 

(c) Compliance with the provisions of this section may be shown by 
analysis or tests, or both. 

2 5.85 5 Ca rgo and Baggage Comp a rtments 

(a) No compartment may contain any controls, wiring, lines, equipment, 
or accessories whose damage or failure would affect safe operation, 
unless those items are protected so that - 

(1 ) They cannot be damaged by the movement of cargo in the 
compartment; and 

(2) Their breakage of failure will not create a fire hazard. 

25.8bl Flammable Fluid Fire Protectio n 

(a) In any area where flammable fluids or vapors might be liberated by 
the leakage of fluid systems, there must be means to prevent the 
ignition of those fluids or vapors, and means to minimize the 
hazards in the event ignition does occur. 

(b) Compliance with paragraph (a) of this section must be shown by 
analysis or tests, and the following factors must be considered. 
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(1) Possible sources and paths of fluid leakage, and means of 
detecting leakage. 


(2) Flammability characteristics of fluids, including effects of 
any combustible or absorbing materials. 


(3) Possible ignition sources, including electrical faults, 

overheating of equipment, and malfunctioning of protective 
devices. 


(4) Means available for controlling or extinguishing a fire, such 
as stopping flow of fluids, shutting down equipment, fireproof 
containment, or use of extinguishing agents. 


(5) Ability of airplane components that are critical to safety of 
flight to withstand fire and heat. 


(c) If action by the flight crew is required to prevent or counteract a 
fluid tire (e.g. equipment shutdown or actuation of a fire 
extinguisher) quick acting means must be provided to alert the crew. 


25.9 54 Fuel Syst em Lightning Prot e ction 


The^fuel system must be designed and arranged to prevent the ignition of 
fuel vapor within the system by - 


(a) Direct lightning strikes to areas having a high probability of 
stroke attachment. 


(b) Swept lightning strokes to areas where swept strokes are highly 
probable; and 


(c) Corona and streaming at fuel vent outlets. 


25.963 Fuel Tanks: General 


(a) Each fuel tank must be able to withstand, without failure, the 

vibration, inertia, fluid, structural loads that it may be subjected 
to in operation. 


(b) Flexible fuel tank liners must be approved or must be shown to be 
suitable for the particular application. 


(c) Integral fuel tanks must have facilities for interior inspection and 


repair. 


(d) Fuel tanks within the fuselage contour must be able to resist 

rupture and to retain fuel, under the inertia forces prescribed for 
the emergency landing conditions in 25.561. In addition, these 




■ 




» s / r r* 
















tanks must be in a protected position so that exposure of the tanks 
to scraping action with the ground is unlikely. 

(e) [Reserved] 

(f) For pressurized fuel tanks, a means with fail-safe features must be 
provided to prevent the buildup of an excessive pressure difference 
between the inside and the outside of the tank. 

2 5.967 Fuel Tank Installation s 

(a) Each fuel tank must be supported so that tank loads (resulting from 
the weight of the fuel in the tanks) are not concentrated on 
unsupported tank surfaces. In addition - 

(1) There must be pads, if necessary, to prevent chafing between 
the tank and its supports. 

(2) Padding must be nonabsorbent or treated to prevent the 
absorption of fluids; 

(3) If a flexible tank liner is used, it must be supported so that 
it is not required to withstand fluid loads; and 

(4) Each interior surface of the tank compartment must be smooth 
and free of projections that could cause wear of the liner 
unless - 

(i) Provisions are made for protection of the liner at these 
points; or 

(ii) The construction of the liner itself provides that 
protect ion, 

(b) Spaces adjacent to tank surfaces must be ventilated to avoid fume 
accumulation due to minor leakage. If the tank is in a sealed 
compartment, ventilation may be limited to drain holes large enough 
to prevent excessive pressure resulting from altitude changes. 

(c) The location of each tank must meet the requirements of 25.1185(a). 

(d) No engine nacelle skin immediately behind a major air outlet from 
the engine compartment may act as the wall of an integral tank. 

(e) Each fuel tank must be isolated from personnel compartments by a 
fume-proof and fuelproof enclosure. 

25.97 l_F ue1 Ta nk Su mp 

(a) Each fuel tank must have a sump with an effective capacity, in the 
normal ground attitude of not less than the greater of 0.10 percent 



















of the tank capacity or one-sixteenth of a gallon unless operating 
limitations are established to ensure that the accumulation of water 
in service will not exceed the sump capacity. 


(b) Each fuel tank must allow drainage of any hazardous quantity of 
water from any part of the tank to its sump with the airplane in the 
ground attitude. 

(c) Each fuel tank sump must have an accessible drain that - 

(1) Allows complete drainage of the sump on the ground; 

(2) Discharges clear of each part of the airplane; and 

(3) Has manual or automatic means for positive locking in the 
closed position. 

25.973 Fuel Tank Filler Connection 


Each fuel tank filler connection must prevent the entrance of fuel into 

any part of the airplane other than the tank itself. In addition - 

(a) Each filler must be marked as prescribed in 25.1557(c); 

(b) Each recessed filler connection that can retain any appreciable 
quantity of fuel must have a drain that discharges clear of each 
part of the airplane; and 

(c) Each filler cap must provide a fuel-tight seal. 

25 .975 F uel Tan k Vent s and C arburetor Vap or Vents 

(a) Fuel tank vents. Each fuel tank must be vented from the top part of 
the expansion space so that venting is effective under any normal 
flight condition. In addition - 

(1) Each vent must be arranged to avoid stoppage by dirt or ice 
formation: 

(2) The arrangement must prevent siphoning of fuel during normal 
operation: 

(3) The venting capacity and vent pressure levels must maintain 
acceptable differences of pressure between the interior and 
exterior of the tank, during - 

(i) Normal flight operation: 

(ii) Maximum rate of ascent and descent; and 

(iii) Refueling and defueling (where applicable); 
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(4) Airspaces of tanks with interconnected outlets must be 
interconnected; 

(5) There may be no point in any vent line where moisture can 
accumulate with the airplane in the ground attitude or the 
level flight attitude, unless drainage is provided; and 

(6) No vent or drainage provision may end at any point - 

(i) Where the discharge of fuel from the vent outlet would 
constitute a fire hazard; or 

(ii) From which fumes could enter personnel compartments. 

(b) Carburetor vapor vents. Each carburetor with vapor elimination 

connections must have a vent line to lead vapors back to one of the 
fuel tanks. In addition - 



(1) Each vent system must have means to avoid stoppage by ice; and 

(2) If there is more than one fuel tank, and it is necessary to use 
the tanks in a definite sequence, each vapor vent return line 
must lead back to the fuel tank used for takeoff and landing. 



2S.977 Fuel Tank Outlet 


(a) There must be a fuel strainer for the fuel tank outlet or for the 
booster pump. This strainer must - 

(1) For reciprocating engine powered airplanes, have 8 to 16 meshes 
per inch: and 

(2) For turbine engine powered airplanes, prevent the passage of 
any object that could restrict fuel flow or damage any fuel 
system components. 

(b) For turbine engine powered airplanes, there must be a means to 
ensure uninterrupted fuel flow to the engine if the strainer 
prescribed in paragraph (a) of this section is subject to ice 
accumulation. This means must provide protection to the fuel system 
components equal to that provided by the strainer prescribed in 
paragraph (a) of this section. 

(c) The clear area of each fuel tank outlet strainer must be at least 
five times the area of the outlet line. 

(d) The diameter of each strainer must be at least that of the fuel tank 
outlet. 
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(e) 


Each finger strainer must be accessible for inspection and cleaning. 
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25.981 Fuel Tank Temperature 


(a) The highest temperature allowing a safe margin below the lowest 
expected autoignition temperature of the fuel in the fuel tanks must 
be determined. 

(b) No temperature at any place inside any fuel tank where fuel ignition 
is possible may exceed the temperature determined under paragraph 
(a) of this section. This must be shown under all probable 
operating, failure, and malfunction conditions of any component 
whose operation, failure, or malfunction could increase the 
temperature inside the tank. 

25.991 Fuel Pumps 

(a) Main pumps. Each fuel pump required to meet the fuel system 
requirements of this subpart (other than those in paragraph (b) of 
this section), is a main pump. For each main pump, provision must 
be made to allow the bypass of each positive displacement fuel pump 
other than a fuel injection pump (a pump that supplies the proper 
flow and pressure for fuel injection when the injection is not 
accomplished in a carburetor) approved as part of the engine. 

(b) Emergency pumps. There must be emergency pumps or another main pump 
to feed each engine immediately after failure of any main pump 
(other than a fuel injection pump approved as part of the engine). 

25.993 Fuel System Lines and Fittings 

(a) Each fuel line must be installed and supported to prevent excessive 
vibration and to withstand loads due to fuel pressure and 
accelerated flight conditions. 

(b) Each fuel line connected to components of the airplane between which 
relative motion could exist must have provisions for flexibility. 

(c) Each flexible connection in fuel lines that may be under pressure 
and subjected to axial loading must use flexible hose assemblies. 

(d) Flexible hose must be approved or must be shown to be suitable for 
the particular application. 

(e) No flexible hose that might be adversely affected by exposure to 
high temperatures may be used where excessive temperatures will 
exist during operation or after engine shut-down. 

(f) Each fuel line within the fuselage must be designed and installed to 
allow a reasonable degree of deformation and stretching without 
leakage. 
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25.1359 Electrical System Fire and Smoke Protection 

(a) Components of the electrical system must meet the applicable fire 
and smoke protection requirements of 25.831(c), 25.863, and 25.1205. 

(b) Electrical cables, terminals, and equipment in designated fire 
zones, that are used during emergency procedures, must be at least 
fire-resistant. 

(c) Main power cables (including generator cables) in the fuselage must 
be designed to allow a reasonable degree of deformation and 
stretching without failure and must - 

(1) Be isolated from flammable fluid lines; or 

(2) Be shrouded by means of electrically insulated flexible 
conduit, or equivalent, which is in addition to the normal 
cable insulation. 

(d) Insulation on electrical wire and electrical cable installed in any 
area of the fuselage must be self-extinguishing when tested at an 
angle of 60° in accordance with the applicable portions of Appendix 
F of this part, or other approved equivalent methods. The average 
burn length may not exceed 3 inches and the average flame time after 
removal of the flame source may not exceed 30 seconds. Drippings 
from the test specimen may not continue to flame for more than 
average of 3 seconds after falling. 

12i-227 Pressure Cross-feed Arrangements 


(a) Pressure cross-feed lines may not pass through parts of the airplane 
used for carrying persons or cargo unless - 

(1) There Ls a means to allow crew-members to shut off the supply 
of fuel to these lines; or 

(2) The lines are enclosed in a fuel and fume-proof enclosure that 
is ventilated and drained to the exterior of the airplane. 
However, such an enclosure need not be used if those lines 
incorporate no fittings on or within the personnel or cargo 
areas and are suitably routed or protected to prevent 
accidental damage. 

(b) Lines that can be isolated from the rest of the fuel system by 
valves at each end must incorporate provisions for relieving 
excessive pressures that may result from exposure of the isolated 
line to high temperature. 
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121.229 Location of Fuel tanks 

(a) Fuel tanks must be located in accordance with 121.255. 

(b) No part of the engine nacelle skin that lies immediately behind a 
major air outlet from the engine compartment may be used as the wall 
of an integral tank. 

(c) Fuel tanks must be isolated from personnel compartments by means of 
fume- and fuel-proof enclosures. 


C.2 British Civil Airworthiness Requirements (BCAR) 

Sub-section D3-Structures , Chapter D3-9 Emergency Alighting Conditions, 
revised, 1st .January, 1951. 


A.C.D 

1. GENERAL - The requirements of this chapter are intended to ensure 
that in the event of an aeroplane making an emergency landing 
involving accelerations up to prescribed maxima, the safety of the 
occupants has been fully considered. Such consideration extends to 
the avoidance of injury to the occupants due to the damage which the 
aeroplane is likely to suffer under the prescribed conditions. 

Note: Hazards to occupants in crash conditions can be reduced by 

designing the aeroplane so that the following occurrences are 
unlikely to cause either direct physical injury to the 
occupants or injury as a result of rupture of the tanks — 

4g downwards to 4.5g upwards 

9 forwards to 1.5g rearwards 

Zero to 2.25g sideways 

3. EQUIPMENT - Items ot equipment shall, so far as is practicable, be 
positioned so that if they break loose they are unlikely to cause 
injury to the occupants or to nillify any of the escape facilities 
provided for use after an emergency alighting. When such positioning 
is not practicable the attachment and surrounding structure shall be 
designed to withstand inertia forces at least equal to those 
prescribed in 2. 

4. CONDITIONS 

a. Crash Landing. The design of the aeroplane shall be such that 
there will be every reasonable probability of the occupants 
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escaping serious injury in the event of a crash landing, 
including the case of wheels retracted when such contingency is 
possible. 

Turnover. The structure of the aeroplane shall be designed to 
protect the occupants in the event of a complete turnover, unless 
the configuration of the aeroplane renders such a contingency 
extremely improbable. 


C.3 AC-25-8 - Advisory Circular Auxiliary Fuel System Installation 

The advisory circular on "auxiliary fuel system installations" 

(reference 55) addresses several areas pertinent to crashworthiness. The 
intent of the circular is to be directed to modifications to existing fuel 
systems and particularly those associated with smaller FAR 25 aircraft. 
However, much of the contents are appropriate for all FAR 25 aircraft. The 
advisory circular contains material arranged in six chapters as follows: 

1. Fuel System Installation Integrity and Crashworthiness 

2. Auxiliary Fuel System Arrangement 

3. Component Materials 

'4. Auxiliary Fuel System Performance 

5. Impact of System on Airplane Operation and Performance 

6. User Installation Requirements 

The material contained in Chapters 1 and 2 is most relevant to this 
current study. Some of the more pertinent passages contained in these two 
chapters are included in the following excerpts: 

CHAPTER 1 - FURL SYST EM INSTALLATION' INTEGRITY AND CRASHWORTH I NESS 

1. STRUCTURAL INSPECTION 

b. Design Criteria and Structural Loads 

(1) The extent of structural substantiation required depends on the 
magnitude and location of the added fuel and the modifications required to 
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accommodate the fuel tank Installation. Generally, evaluation of the tank 
attachment hardware and local structure will be sufficient; however, as noted 
earlier, installations that involve changes to primary structure, aerodynamics 
or mass distribution may require additional extensive substantiation that is 
beyond the scope of this AC. Any increase in maximum weight or changes in 
c.g. limits to increase the utility of the airplane with the auxiliary fuel 
system installed is also beyond the scope of this AC. 

(2) The tank design should isolate the tank from airframe induced 
structural loads and from deformations induced by the wing and fuselage. 

(3) The fuel tank and its attachment and support structures must be 
designed to withstand all design loads, including the emergency landing load 
specified in paragraph 25.561(b). 

(4) Fuel loads included in the structural substantiation should be 
based on the most critical density of the fuels approved for use in the 
airplane. 

(6) In addition to the requirements of paragraph 25.963(d) regarding 
retention of the auxiliary fuel tank itself, it should be shown by a 
crashworthiness analysis or the equivalent that the airplane lower fuselage 
and auxiliary fuel tank supporting structure are capable of absorbing the 
kinetic energy with landing gear up associated with the five f.p.s. ultimate 
descent velocity found in paragraph 25.561. Dynamic loads defined by the 
crashworthiness analysis should be accounted for in the stress analysis. 

(7) Sufficient vehicle structural crush distance should be available 
to avoid auxiliary fuel tank ground contact under the loading conditions of 
paragraph 25.561(b). Compliance may be shown by analysis and where necessary 
by test. The analysis should identify the failure mode and define the inter¬ 
action between the tank and adjacent structure and between adjacent tanks. 

(8) Structural deformation must be shown to be controllable and 
predictable, as required by paragraph 25.965. 

(11) Keel structure that is adequate for tank load distribution and 
protection against rupture in crash landing should be provided for all tanks. 
Consideration should be given to eccentricities introduced into the basic 
airframe from fuel tank attachments. 

(12) The following must be considered in the evaluation of the tank 
and tank support structure in accordance with the applicable certification 
basis: 

(vi) To preclude rupture and provide durability, the face 
sheet thickness should be sufficient for the applicable load requirements. To 
prevent accidental damage, these thicknesses are typically not less than .040 
inch equivalent aluminum for the outer face sheets or .020 inch for the inner 
face sheets. 
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d. Crash Overload . Hard attachment points between the fuel tank and 
airframe structure restrict relative motion and, in turn, impose high 
concentrated loads on both the tank and the airframe. In order to limit the 
magnitude of these concentrated loads, crash load failure points are typically 
located between the tank and airframe. In addition: 

(1) Attachment point loads should be evenly distributed to minimize 
the possibility of fuel tank rupture. 

(2) In the event of an overload conditioin, the failure should occur 
at some point between the tank attach fitting and the basic airframe and floor 
structure to minimize potential body tank rupture. Where possible, failure of 
the tank support should not induce failure of the fuel lines for the maximum 
tank displacement that could occur. It may be necessary to incorporate 
redundant supports or secondary constraint bulkheads in this regard. 

2. TANK LOCATION CRITERIA 

c. Proximity to Fuselage Break Separation Points . Fuselage break points 
are typically found at areas of structural discontinuity in the fuselage 

shelL. Where possible, avoid locating the tank and its support structure at 

these discontinuities. Examples are: 

(1) The fore and aft ends of the wing box structure; 

(2) The fore and aft ends of the landing gear compartments; 

(3) Fuselage shell cutouts such as boarding/emergency exit/cabin 
servicing doors and baggage compartment doors; and 

(■'♦) Manufacturing splice and field breaks. 

i. Installations in Cargo and Baggage Compartments (Paragraphs 25.855(b), 
2 >.855(j-1), (a-2) and 26.857 ). 

(1) The various components of an auxiliary fuel system installed in 
cargo and baggage compartments should be protected from damage caused by 
shifting cargo. A cargo barrier should be used to separate the auxiliary fuel 
system from the cargo. The barrier should be designed to contain the maximum 
cargo loading for which the compartment is approved under all load conditions 
including the emergency landing conditions. This barrier may be either a 
rigid or a flexible type. Solid barriers are sometimes installed to toally 
separate and isolate the auxiliary fuel system from the compartment, resulting 
in a reduced compartment size. If the barrier is flexible, consideration 
should be given to deformation or displacement of the barrier when under load. 
7 minimum tension requirements ire necessary to maintain the structural 
integrity of a flexible barrier, the requirements should be specified and 
conspicuously displayed in the compartment. Finally, the barrier should 
prevent any type of bulk cargo, particularly slender or sharp objects, from 
penetrating components of the auxiliary fuel system, and be structurally 






















capable of preventing cargo from contacting the fuel system Installation under 
all load conditions including emergency landing inertia loads. Alternatively, 
a barrier would not be needed if it can be shown that the fuel tank system 
shroud or outer wall can offer equivalent protection to the remaining 
components of the system. In addition, the auxiliary fuel system installation 
should not adversely affect intercompartmental venting incorporated in the 
basic airplane. 

4. GENERAL ARRANGEMENT EVALUATION 
a. System Layout 

1. Line Routing, Flexibility and Support 

(ii) Consider the crashworthiness characteristics of the line 
routing. Where possible, interconnect tanks, rigid metal lines and other 
major fuel system components with flexible lines. Allow sufficient flexible 
line length to permit some shifting of the components without breaking the 
lines or connections. The flexibility of the entire fuselage auxiliary fuel 
line routing should be sufficient to account for fuselage break points. If 
lines are routed near structural members, the effect of "guillotine" or 
slashing action due to a crash landing should be addressed. When routing fuel 
lines through cabin floor structural lightening holes is necessary, provide 
sufficient clearance to prevent line severing due to floor deformations on a 
crash landing. A crashworthiness evaluation report of the auxiliary fuel 
system installation should be submitted during certification which shows, by 
analysis or test, that precautions have been taken to minimize the hazards due 
a survivable crash environment. 

2. Fuel Tank and Component Location, Access, Mounting and 
Protect ion 

(i) Each auxiliary fuel tank or tank module design should be 
evaluated for the basic requirements of paragraphs 25.963 and 25.965. These 
requirements address, for example, the basic integrity of the tank, bladder 
cell requirements, pressurized tank requirements and the tank tests, such as, 
slosh and vibration, that may be required. 

(ii) As a general rule, all components, such as valves, 
pressure transmitters or switches, filters, etc., should be directly mounted 
to the airplane structure or to supports which are directly attached to the 
structure. If fuel or other system lines or fittings are used to support 
auxiliary fuel system "in-line" small'lightweight components, it should be 
shown that this practice does not result in excessive structural stresses when 
subjected to the vibration and other loads expected in service. 

(iv) Locating components in areas where there is a high 
probability that they can be stepped on or tripped over by personnel during 
the routine servicing or maintenance of the airplane should be avoided. The 
crashworthiness of the location should also be considered. Components should 














not be instilled below the fuselage cargo floor if they may be crushed, 
scraped otf, or cause penetration into the auxiliary fuel tank which can 
result in leakage during a wheel.s-up landing. protection from damage due to 
shifting baggage and other objects which may not be tied down in the cargo 
area should be provided. See Chapter !, paragraph 2a for cargo barrier 
criteria. 

(v) For components which must be located inside the fuel 

tanks, the crashworthiness aspects of the installation should be considered. 
Means to prevent component sharp edges from penetrating the tank surface due 
to deflection of the surface under crash load conditions should be provided, 
especially where flexible tank bladder cells are used. 

3. Tank Penetration Points 

(iii.) ML tank fuel line to airplane structure attachments 
should be evaluated for the flight, flight vibration and crash loads which may 
be transmitted to the tank walls. From the crashworthiness standpoint, to 
prevent tael tank fittings from being torn out of the tank wall, it may be 
advisable to consider the need for frangible disconnect valves or fittings, 
mounted >n the ex:. rnal surface of the tank, which separate and shut off any 
hazardous fuel flow from the tank in event of a crash. However, a failure 
analysis must show that inadvertent closure of these frangible fittings will 
not interfere with continued safe flight. 

b. Fuel Containment Secondary Barriers (Paragraphs 25.967, 25.863). For 
uuxiU iry fuel systems which are located in the passenger or cargo and baggage 
iompartments (Appendix 1), isolation of the fuel and fuel vapors from other 
areas of the compartment is of critical importance. Tanks, line fittings, 
connections and other components, such as valves, pressure transmitters, 
regnlat >rs, etc., must be shrouded or provided with redundant barriers such 
•hai 1->aks iron any of these sources will not present a fire hazard. Some of 
ihe important characteristics of the secondary barrier system are: 

o. Tank, Fuel and Vent bine and Component Shrouds (Paragraph 25.967). 


'I) An <i1iary t uel 
baggage compartment should be 
sittings connected to and tItr 
secondary birriers. Figures 
shrouding equipment items and 
rich tank penetration design 
(such as i seat failure) does 
■ompirtment. A primary seal 
■'equired protection if indica 
i.id the secondary seal is pre 


tanks installed in a passenger or cargo and 
completely shrouded. This means that all 
oug'i the tank walls should also be provided with 
1 and 3 stiow some acceptable designs for 
fittings installed on or through tilt* tank walls, 
should be reviewed to ensure a single failure 
not result in fuel or fuel vapors entering the 
with a secondary shroud/seal provides the 
tion of a primary seal failure is also provided 
ssure tested periodically. 


!.!) \l l v uit and fuel fittings and connections in a passenger or 
Cargo compartment should also be shrouded. An example of this is shown in 
1igure a (reference 551. 








5. FUEL SYSTEM CONTAMINATION PREVENTION ASSESSMENT (Paragraphs 25.971, 25.977 
and 25.997) 


a. Fuel Tank Sumps and Fuel Strainers 


(2) Sump Drain Provisions. All sumps should have provisions which 
allow complete drainage of the sump. These drainage provisions should be 
carefully designed to provide high reliability in service and a high degree of 
crashworthiness. Drain valves should be positive locking and reliable. Drain 
valve installations should provide double seals to prevent overboard leakage 
from a single seal failure. Lightning aspects of the overboard access should 
be addressed as discussed in the next section. Locate the drain valve at or 
near the sump. Do not locate drain valves on the bottom surface of the 
fuselage or other areas where they may be inadvertently damaged or opened. In 
passenger/cargo compartments, sump drains should be shrouded in accordance 
with the provisions described in the previous section and the shrouds provided 
with vents per normal shroud procedures. The shrouded fitting between the 
sump drain and the overboard penetration should provide a "fuse" point or 
other means to ensure that upward penetration of the tank does not occur 
during a crash landing. 
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